CVE-2024-57807

scsi: megaraid_sas: Fix for a potential deadlock

State: Published
Severity: 5.5 Medium
Published: Jan 11, 2025
Updated: May 23, 2026
Reserved: Jan 11, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: megaraid_sas: Fix for a potential deadlock

This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock(&instance->reset_mutex); lock(&shost->scan_mutex); lock(&instance->reset_mutex); lock(&shost->scan_mutex);

Fix this by temporarily releasing the reset_mutex.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-667 Improper Locking

Affected Products

Product	Versions
LinuxLinux	e8c75b5d88f255ac5dcc4a90ae0c300f0b171fe7 to before 78afb9bfad00c4aa58a424111d7edbcab9452f2bAffected 422fb12054f42c4c82e3959811afd01bc080821a to before f36d024bd15ed356a80dda3ddc46d0a62aa55815Affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 3c654998a3e8167a58b6c6fede545fe400a4b554Affected ae6874ba4b43c5a00065f48599811a09d33b873d to before edadc693bfcc0f1ea08b8fa041c9361fd042410dAffected ae6874ba4b43c5a00065f48599811a09d33b873d to before f50783148ec98a1d38b87422e2ceaf2380b7b606Affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 466ca39dbf5d0ba71c16b15c27478a9c7d4022a8Affected ae6874ba4b43c5a00065f48599811a09d33b873d to before 50740f4dc78b41dec7c8e39772619d5ba841ddd7Affected 5f4f65212e42feaee32533448f1c1defdaa6befaAffected 2262bb7ee19e2d0056ffae84cd1803bd330d06afAffected 5.4.134 to before 5.4.289Affected 5.10.52 to before 5.10.233Affected 5.12.19 to before 5.13Affected 5.13.4 to before 5.14Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.4.289 through 5.4.Not affected 5.10.233 through 5.10.Not affected 5.15.176 through 5.15.Not affected 6.1.123 through 6.1.Not affected 6.6.69 through 6.6.Not affected 6.12.8 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

e8c75b5d88f255ac5dcc4a90ae0c300f0b171fe7 to before 78afb9bfad00c4aa58a424111d7edbcab9452f2bAffected
422fb12054f42c4c82e3959811afd01bc080821a to before f36d024bd15ed356a80dda3ddc46d0a62aa55815Affected
ae6874ba4b43c5a00065f48599811a09d33b873d to before 3c654998a3e8167a58b6c6fede545fe400a4b554Affected
ae6874ba4b43c5a00065f48599811a09d33b873d to before edadc693bfcc0f1ea08b8fa041c9361fd042410dAffected
ae6874ba4b43c5a00065f48599811a09d33b873d to before f50783148ec98a1d38b87422e2ceaf2380b7b606Affected
ae6874ba4b43c5a00065f48599811a09d33b873d to before 466ca39dbf5d0ba71c16b15c27478a9c7d4022a8Affected
ae6874ba4b43c5a00065f48599811a09d33b873d to before 50740f4dc78b41dec7c8e39772619d5ba841ddd7Affected
5f4f65212e42feaee32533448f1c1defdaa6befaAffected
2262bb7ee19e2d0056ffae84cd1803bd330d06afAffected
5.4.134 to before 5.4.289Affected
5.10.52 to before 5.10.233Affected
5.12.19 to before 5.13Affected
5.13.4 to before 5.14Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.4.289 through 5.4.*Not affected
5.10.233 through 5.10.*Not affected
5.15.176 through 5.15.*Not affected
6.1.123 through 6.1.*Not affected
6.6.69 through 6.6.*Not affected
6.12.8 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.