CVE-2024-49976

tracing/timerlat: Drop interface_lock in stop_kthread()

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 23, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing/timerlat: Drop interface_lock in stop_kthread()

stop_kthread() is the offline callback for "trace/osnoise:online", since commit 5bfbcd1ee57b ("tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()"), the following ABBA deadlock scenario is introduced:

T1 | T2 [BP] | T3 [AP] osnoise_hotplug_workfn() | work_for_cpu_fn() | cpuhp_thread_fun() | _cpu_down() | osnoise_cpu_die() mutex_lock(&interface_lock) | | stop_kthread() | cpus_write_lock() | mutex_lock(&interface_lock) cpus_read_lock() | cpuhp_kick_ap() |

As the interface_lock here in just for protecting the "kthread" field of the osn_var, use xchg() instead to fix this issue. Also use for_each_online_cpu() back in stop_per_cpu_kthreads() as it can take cpu_read_lock() again.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b4fdabffae14cca2c80d99bd81f3f27239ac7f5e to before a4a05ceffe8fad68b45de38fe2311bda619e76e2Affected
  • 4679272d5252720746fd9c5465352cbc5665f230 to before 09cb44cc3d3df7ade2cebc939d6257a2fa8afc7aAffected
  • 5bfbcd1ee57b607fd29e4645c7f350dd385dd9ad to before db8571a9a098086608c11a15856ff585789e67e8Affected
  • 5bfbcd1ee57b607fd29e4645c7f350dd385dd9ad to before b484a02c9cedf8703eff8f0756f94618004bd165Affected
  • 6.6.51 to before 6.6.55Affected
  • 6.10.10 to before 6.10.14Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.