CVE-2021-47041

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix incorrect locking in statechange sk callback We are not changing anything in the TCP connection state so we should not take a writelock but rather a read lock. This caused a deadlock when running nvmet-tcp and...

CVE-2021-46987

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline extent data into a page of the destination inode. When this happens, we e...

CVE-2023-34324

Closing of an event channel in the Linux kernel can result in a deadlock. This happens when the close is being performed in parallel to an unrelated Xen console action and the handling of a Xen console interrupt in an unprivileged guest. The closing of an event channel is e.g. triggered by remova...

MGASA-2023-0328 Updated kernel packages fix security vulnerabilities and other bugs

This kernel update is based on upstream 6.5.11 and fixes or adds mitigations for at least the following security issues: A use-after-free vulnerability was found in drivers/nvme/target/tcp.c in nvmettcpfreecrypto due to a logical bug in the NVMe-oF/TCP subsystem in the Linux kernel. This issue ma...

PT-2025-18893 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock issue during directory rename operations has been identified. The problem arises from incorrect lock ordering, where i rwsem is locked while transactions are started, contra...

Medium: kernel

Issue Overview: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests. CVE-2023-34324 In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors CVE-2023-52477 In...

PT-2023-24886 · Cometbft · Cometbft

Name of the Vulnerable Software and Affected Versions: CometBFT versions 0.34.28 through 0.34.28 CometBFT versions 0.37.1 through 0.37.1 Description: An internal modification to the way struct PeerState is serialized to JSON introduced a deadlock when the new function MarshallJSON is called. This...

PT-2025-25912 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.0-1086-azure 9118.04.1-Ubuntu Description: The issue is related to the storvsc error wq workqueue in the Linux kernel, which was incorrectly marked as WQ MEM RECLAIM. This marking may cause a deadlock while...

PT-2023-35015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to a potential deadlock in the enetc tx onestep tstamp function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33511 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.6 through v6.0.17 Description: The issue is related to a deadlock caused by mbcache entry corruption in the ext4 filesystem. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2022-36555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A potential issue exists in the nilfs2 file system, related to a deadlock in the nilfs count free blocks function. The actual impact and attack plausibility have not yet been proven...

PT-2022-36324 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.38 through 5.10.154 Description: A potential issue exists in the nilfs2 filesystem, specifically a deadlock in the nilfs count free blocks function. The actual impact and attack plausibility have not yet been proven...

PT-2022-36493 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: A potential issue exists in the nilfs2 file system, related to a deadlock in the nilfs count free blocks function. The actual impact and attack plausibility have not yet been proven...

PT-2022-36417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.38 through 5.4.224 Description: A potential issue exists in the nilfs2 file system, related to a deadlock in the nilfs count free blocks function. The actual impact and attack plausibility have not yet been proven...

CVE-2022-42329

Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...

PT-2022-33861 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A potential deadlock issue exists in the driver core, specifically in the driver attach function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-34278 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A potential deadlock issue exists in the driver core, specifically in the driver attach function. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.1 through v5.19.1 Description: A potential deadlock issue exists in the driver attach function of the driver core. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2021-3735

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ahciresetport while handling a host-to-device Register FIS Frame Information Structure packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host...

CVE-2021-3735

CVE-2021-3735 describes a deadlock in the AHCI controller device of QEMU. The issue occurs during a software reset (ahci_reset_port) while processing a host-to-device Register FIS from a guest, allowing a privileged guest user to hang the QEMU process on the host and cause a denial of service. Co...