Deadlock issue in cdnsp_thread_irq_handler in Kernel
Summary
GSD-2021-1001031: usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler. Affects Kernel versions >= 3d82904559f4f5a2622db1b21de3edf2eded7664, < ae746b6f4ce619cf4032fd798a232b010907a397. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The cdnsp_thread_irq_handler is a part of the USB subsystem in the Kernel, responsible for handling interrupts related to the CDNsp USB controller. This vulnerability specifically affects the cdnsp_thread_irq_handler function.
Vulnerability Detail
The cdnsp_thread_irq_handler function in the Kernel is susceptible to a deadlock issue. A deadlock occurs when two or more threads are blocked indefinitely, waiting for each other to release resources. In this case, the deadlock issue arises due to improper handling of interrupts in the cdnsp_thread_irq_handler function. This vulnerability can lead to system instability, unresponsiveness, or even crashes. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the cdnsp_thread_irq_handler function in the Kernel is vulnerable to a deadlock issue. Updating the Linux Kernel to version v5.12.11 or later resolves this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The cdnsp_thread_irq_handler function is a part of the USB subsystem in the Linux Kernel. It is responsible for handling interrupts related to the CDNsp USB controller.
A deadlock is a situation where two or more threads are blocked indefinitely, waiting for each other to release resources. It can lead to system instability and unresponsiveness.
This vulnerability can result in system instability, unresponsiveness, or crashes. However, the actual impact and attack plausibility have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.12.11 or later, which includes the necessary fix for the deadlock issue in cdnsp_thread_irq_handler.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2021-1001031.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
