In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() calls the lpfc_work_done() routine, which takes the hbalock. Thus, lpfc_worker_wake_up() should not be called while holding the hbalock to avoid potential deadlock.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Tus

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
kernel-0:4.18.0-372.113.1.el8_6 cpe:/o:redhat:rhel_aus:8.6 RHSA-2024:4902 2024-07-29T00:00:00Z
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
kernel-0:4.18.0-372.113.1.el8_6 cpe:/o:redhat:rhel_tus:8.6 RHSA-2024:4902 2024-07-29T00:00:00Z
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
kernel-0:4.18.0-372.113.1.el8_6 cpe:/o:redhat:rhel_e4s:8.6 RHSA-2024:4902 2024-07-29T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.28.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:4928 2024-07-31T00:00:00Z
kernel-0:5.14.0-427.28.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:4928 2024-07-31T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
kernel-0:5.14.0-284.75.1.el9_2 cpe:/a:redhat:rhel_eus:9.2 RHSA-2024:4823 2024-07-24T00:00:00Z
kernel-rt-0:5.14.0-284.75.1.rt14.360.el9_2 cpe:/a:redhat:rhel_eus:9.2::nfv RHSA-2024:4831 2024-07-24T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/6503c39398506cadda9f4c81695a9655ca5fb4fd cve-icon cve-icon
https://git.kernel.org/stable/c/ded20192dff31c91cef2a04f7e20e60e9bb887d3 cve-icon cve-icon
https://git.kernel.org/stable/c/e8bf2c05e8ad68e90f9d5889a9e4ef3f6fe00683 cve-icon cve-icon
https://git.kernel.org/stable/c/ee833d7e62de2b84ed1332d501b67f12e7e5678f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024053040-CVE-2024-36924-6326@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-36924 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-36924 cve-icon
History

Fri, 10 Jan 2025 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-667
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 19 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-30T15:29:18.113Z

Updated: 2024-12-19T09:02:11.893Z

Reserved: 2024-05-30T15:25:07.069Z

Link: CVE-2024-36924

cve-icon Vulnrichment

Updated: 2024-08-02T03:43:50.073Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-30T16:15:15.723

Modified: 2025-01-10T18:29:03.477

Link: CVE-2024-36924

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-30T00:00:00Z

Links: CVE-2024-36924 - Bugzilla