目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

CVE-2024-26873— Linux kernel 安全漏洞

AI 预测 5.3 利用难度: 中等 EPSS 0.17% · P7

影响版本矩阵 9

厂商产品版本范围状态
LinuxLinux91e035e98fa1383ca90d774c29bb14c3c5ed2d8c< a47f0b03149af538af4442ff0702eac430ace1cbaffected
2ff07b5c6fe9173e7a7de3b23f300d71ad4d8fde< e022dd3b875315a2d2001a512e98d1dc8c991f4aaffected
2ff07b5c6fe9173e7a7de3b23f300d71ad4d8fde< 85c98073ffcfe9e46abfb9c66f3364467119d563affected
2ff07b5c6fe9173e7a7de3b23f300d71ad4d8fde< 3c4f53b2c341ec6428b98cb51a89a09b025d0953affected
6.7affected
< 6.7unaffected
6.7.11≤ 6.7.*unaffected
6.8.2≤ 6.8.*unaffected
… +1 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2024-26873 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
scsi: hisi_sas: Fix a deadlock issue related to automatic dump
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix a deadlock issue related to automatic dump If we issue a disabling PHY command, the device attached with it will go offline, if a 2 bit ECC error occurs at the same time, a hung task may be found: [ 4613.652388] INFO: task kworker/u256:0:165233 blocked for more than 120 seconds. [ 4613.666297] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.674809] task:kworker/u256:0 state:D stack: 0 pid:165233 ppid: 2 flags:0x00000208 [ 4613.683959] Workqueue: 0000:74:02.0_disco_q sas_revalidate_domain [libsas] [ 4613.691518] Call trace: [ 4613.694678] __switch_to+0xf8/0x17c [ 4613.698872] __schedule+0x660/0xee0 [ 4613.703063] schedule+0xac/0x240 [ 4613.706994] schedule_timeout+0x500/0x610 [ 4613.711705] __down+0x128/0x36c [ 4613.715548] down+0x240/0x2d0 [ 4613.719221] hisi_sas_internal_abort_timeout+0x1bc/0x260 [hisi_sas_main] [ 4613.726618] sas_execute_internal_abort+0x144/0x310 [libsas] [ 4613.732976] sas_execute_internal_abort_dev+0x44/0x60 [libsas] [ 4613.739504] hisi_sas_internal_task_abort_dev.isra.0+0xbc/0x1b0 [hisi_sas_main] [ 4613.747499] hisi_sas_dev_gone+0x174/0x250 [hisi_sas_main] [ 4613.753682] sas_notify_lldd_dev_gone+0xec/0x2e0 [libsas] [ 4613.759781] sas_unregister_common_dev+0x4c/0x7a0 [libsas] [ 4613.765962] sas_destruct_devices+0xb8/0x120 [libsas] [ 4613.771709] sas_do_revalidate_domain.constprop.0+0x1b8/0x31c [libsas] [ 4613.778930] sas_revalidate_domain+0x60/0xa4 [libsas] [ 4613.784716] process_one_work+0x248/0x950 [ 4613.789424] worker_thread+0x318/0x934 [ 4613.793878] kthread+0x190/0x200 [ 4613.797810] ret_from_fork+0x10/0x18 [ 4613.802121] INFO: task kworker/u256:4:316722 blocked for more than 120 seconds. [ 4613.816026] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.824538] task:kworker/u256:4 state:D stack: 0 pid:316722 ppid: 2 flags:0x00000208 [ 4613.833670] Workqueue: 0000:74:02.0 hisi_sas_rst_work_handler [hisi_sas_main] [ 4613.841491] Call trace: [ 4613.844647] __switch_to+0xf8/0x17c [ 4613.848852] __schedule+0x660/0xee0 [ 4613.853052] schedule+0xac/0x240 [ 4613.856984] schedule_timeout+0x500/0x610 [ 4613.861695] __down+0x128/0x36c [ 4613.865542] down+0x240/0x2d0 [ 4613.869216] hisi_sas_controller_prereset+0x58/0x1fc [hisi_sas_main] [ 4613.876324] hisi_sas_rst_work_handler+0x40/0x8c [hisi_sas_main] [ 4613.883019] process_one_work+0x248/0x950 [ 4613.887732] worker_thread+0x318/0x934 [ 4613.892204] kthread+0x190/0x200 [ 4613.896118] ret_from_fork+0x10/0x18 [ 4613.900423] INFO: task kworker/u256:1:348985 blocked for more than 121 seconds. [ 4613.914341] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4613.922852] task:kworker/u256:1 state:D stack: 0 pid:348985 ppid: 2 flags:0x00000208 [ 4613.931984] Workqueue: 0000:74:02.0_event_q sas_port_event_worker [libsas] [ 4613.939549] Call trace: [ 4613.942702] __switch_to+0xf8/0x17c [ 4613.946892] __schedule+0x660/0xee0 [ 4613.951083] schedule+0xac/0x240 [ 4613.955015] schedule_timeout+0x500/0x610 [ 4613.959725] wait_for_common+0x200/0x610 [ 4613.964349] wait_for_completion+0x3c/0x5c [ 4613.969146] flush_workqueue+0x198/0x790 [ 4613.973776] sas_porte_broadcast_rcvd+0x1e8/0x320 [libsas] [ 4613.979960] sas_port_event_worker+0x54/0xa0 [libsas] [ 4613.985708] process_one_work+0x248/0x950 [ 4613.990420] worker_thread+0x318/0x934 [ 4613.994868] kthread+0x190/0x200 [ 4613.998800] ret_from_fork+0x10/0x18 This is because when the device goes offline, we obtain the hisi_hba semaphore and send the ABORT_DEV command to the device. However, the internal abort timed out due to the 2 bit ECC error and triggers automatic dump. In addition, since the hisi_hba semaphore has been obtained, the dump cannot be executed and the controller cannot be reset. Therefore, the deadlocks occur on the following circular dependencies ---truncated---
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于存在死锁问题。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux 91e035e98fa1383ca90d774c29bb14c3c5ed2d8c ~ a47f0b03149af538af4442ff0702eac430ace1cb -
LinuxLinux 6.7 -

二、漏洞 CVE-2024-26873 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2024-26873 的情报信息

登录查看更多情报信息。

CVE-2024-26873 补丁与修复 (1)

CVE-2024-26873 其他参考 (3)

同批安全公告 · Linux · 2024-04-17 · 共 100 条

CVE-2024-268779.8 CRITICALLinux kernel 安全漏洞
CVE-2024-268539.8 CRITICALLinux kernel 安全漏洞
CVE-2024-268289.4 CRITICALLinux kernel 安全漏洞
CVE-2024-268568.8 HIGHLinux kernel 安全漏洞
CVE-2024-268228.7 HIGHLinux kernel 安全漏洞
CVE-2024-268308.4 HIGHLinux kernel 安全漏洞
CVE-2024-269147.8 HIGHLinux kernel 安全漏洞
CVE-2024-268987.8 HIGHLinux kernel 安全漏洞
CVE-2024-268527.8 HIGHLinux kernel 安全漏洞
CVE-2024-268957.8 HIGHLinux kernel 安全漏洞
CVE-2024-268907.8 HIGHLinux kernel 安全漏洞
CVE-2024-268647.8 HIGHLinux kernel 安全漏洞
CVE-2024-268657.8 HIGHLinux kernel 安全漏洞
CVE-2024-268697.8 HIGHLinux kernel 安全漏洞
CVE-2024-268707.8 HIGHLinux kernel 安全漏洞
CVE-2024-268727.8 HIGHLinux kernel 安全漏洞
CVE-2024-268857.8 HIGHLinux kernel 安全漏洞
CVE-2024-268847.8 HIGHLinux kernel 安全漏洞
CVE-2024-268837.8 HIGHLinux kernel 安全漏洞
CVE-2024-268807.8 HIGHLinux kernel 安全漏洞

显示前 20 条,共 100 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2024-26873

暂无评论


发表评论