Aller au contenu
Non notée

CVE-2024-42090 In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when…

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER In create_pinctrl(), pinctrl_maps_mutex is acquired before calling add_setting(). If add_setting() returns -EPROBE_DEFER, create_pinctrl() calls pinctrl_free(). However, pinctrl_free() attempts to acquire pinctrl_maps_mutex, which is already held by create_pinctrl(), leading to a potential deadlock. This patch resolves the issue by releasing pinctrl_maps_mutex before calling pinctrl_free(), preventing the deadlock. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.10 premières → < 6.10 6.10
Linux 6.9 premières → < 6.9.8 6.9.8
Linux 6.6 premières → < 6.6.37 6.6.37
Linux 6.1 premières → < 6.1.97 6.1.97
Linux 5.15 premières → < 5.15.162 5.15.162
Linux 5.10 premières → < 5.10.221 5.10.221
Linux 5.4 premières → < 5.4.279 5.4.279
Linux 4.19 premières → < 4.19.317 4.19.317
Linux 3.10 Pas de correctif indiqué
Afficher l’autre branche
Produit Versions touchées Corrigé en
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 premières → < 1.1.1 1.1.1
Les 18286 CVE de Linux →
Suivre cette CVE