In the Linux kernel, the following vulnerability has been resolved:
tty: add the option to have a tty reject a new ldisc
… and use it to limit the virtual terminals to just N_TTY. They are
kind of special, and in particular, the “con_write()” routine violates
the “writes cannot sleep” rule that some ldiscs rely on.
This avoids the
BUG: sleeping function called from invalid context at
kernel/printk/printk.c:2659
when N_GSM has been attached to a virtual console, and gsmld_write()
calls con_write() while holding a spinlock, and con_write() then tries
to get the console lock.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 24.04 | noarch | linux-aws | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws-5.15 | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws-6.5 | < any | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < any | UNKNOWN |
ubuntu | 22.04 | noarch | linux-azure | < any | UNKNOWN |
git.kernel.org/linus/6bd23e0c2bb6c65d4f5754d1456bc9a4427fc59b (6.10-rc1)
git.kernel.org/stable/c/287b569a5b914903ba7c438a3c0dbc3410ebb409
git.kernel.org/stable/c/3c6332f3bb1578b5b10ac2561247b1d6272ae937
git.kernel.org/stable/c/5920ac19964f9e20181f63b410d9200ddbf8dc86
git.kernel.org/stable/c/6bd23e0c2bb6c65d4f5754d1456bc9a4427fc59b
launchpad.net/bugs/cve/CVE-2024-40966
nvd.nist.gov/vuln/detail/CVE-2024-40966
security-tracker.debian.org/tracker/CVE-2024-40966
www.cve.org/CVERecord?id=CVE-2024-40966