CVE-2024-27021

2024-05-0100:00:00

ubuntu.com

linux

kernel

vulnerability

fix

r8169

deadlock

led

removal

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: r8169:
fix LED-related deadlock on module removal Binding
devm_led_classdev_register() to the netdev is problematic because on module
removal we get a RTNL-related deadlock. Fix this by avoiding the
device-managed LED functions. Note: We can safely call
led_classdev_unregister() for a LED even if registering it failed, because
led_classdev_unregister() detects this and is a no-op in this case.

OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchlinux< 6.8.0-38.38UNKNOWN
ubuntu24.04noarchlinux-aws< 6.8.0-1011.12UNKNOWN
ubuntu24.04noarchlinux-azure< 6.8.0-1010.10UNKNOWN
ubuntu24.04noarchlinux-gcp< 6.8.0-1010.11UNKNOWN
ubuntu24.04noarchlinux-gke< 6.8.0-1006.9UNKNOWN
ubuntu24.04noarchlinux-ibm< 6.8.0-1008.8UNKNOWN
ubuntu24.04noarchlinux-intel< 6.8.0-1007.14UNKNOWN
ubuntu24.04noarchlinux-lowlatency< 6.8.0-38.38.1UNKNOWN
ubuntu24.04noarchlinux-nvidia< 6.8.0-1009.9UNKNOWN
ubuntu24.04noarchlinux-oem-6.8< 6.8.0-1008.8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	24.04	noarch	linux	< 6.8.0-38.38	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< 6.8.0-1011.12	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< 6.8.0-1010.10	UNKNOWN
ubuntu	24.04	noarch	linux-gcp	< 6.8.0-1010.11	UNKNOWN
ubuntu	24.04	noarch	linux-gke	< 6.8.0-1006.9	UNKNOWN
ubuntu	24.04	noarch	linux-ibm	< 6.8.0-1008.8	UNKNOWN
ubuntu	24.04	noarch	linux-intel	< 6.8.0-1007.14	UNKNOWN
ubuntu	24.04	noarch	linux-lowlatency	< 6.8.0-38.38.1	UNKNOWN
ubuntu	24.04	noarch	linux-nvidia	< 6.8.0-1009.9	UNKNOWN
ubuntu	24.04	noarch	linux-oem-6.8	< 6.8.0-1008.8	UNKNOWN