Fix deadlock in SCSI I/O completion and abort handler in lpfc
Summary
GSD-2022-1003400: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock. Affects Kernel versions < 7625e81de2164a082810e1f27547d388406da610. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The lpfc driver is a SCSI driver used in the Linux Kernel. It provides support for Fibre Channel Host Bus Adapters (HBAs) and allows communication between the operating system and Fibre Channel storage devices. The driver is responsible for handling SCSI I/O operations and managing the communication with the storage devices.
Vulnerability Detail
The lpfc driver in the Linux Kernel is affected by a deadlock issue in the SCSI I/O completion and abort handler. This vulnerability can occur when a SCSI I/O operation is completed or aborted while the abort handler is still running. This can lead to a deadlock situation, where the system becomes unresponsive and may require a reboot to recover. The impact of this vulnerability can vary depending on the specific use case and workload, but it has the potential to disrupt storage operations and cause system instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to apply the fix by updating their Linux Kernel to the patched version.
Conclusion
The lpfc driver in the Linux Kernel is affected by a deadlock vulnerability in the SCSI I/O completion and abort handler. To mitigate this vulnerability, users should update their Linux Kernel to version v5.15.46 or later. There is no known workaround available. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The lpfc driver is a SCSI driver used in the Linux Kernel to provide support for Fibre Channel Host Bus Adapters (HBAs) and enable communication with Fibre Channel storage devices.
The vulnerability can lead to a deadlock situation, causing the system to become unresponsive and potentially requiring a reboot to recover. It can disrupt storage operations and result in system instability.
To fix the vulnerability, users should update their Linux Kernel to version v5.15.46 or later. This can be done by downloading the updated kernel source code from the official Linux Kernel repository and compiling it according to the provided instructions.
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
For more information about this vulnerability, you can refer to the vulnerability details in the Open Source Vulnerability format. The vulnerability ID is GSD-2022-1003400.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
