Deadlock in the error handler of scsi: ufs
Summary
GSD-2022-1000479: scsi: ufs: Fix a deadlock in the error handler. Affects Kernel versions < 493c9e850677df8b4eda150c2364b1c1a72ed724. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The scsi: ufs package is a component of the Linux Kernel, which is responsible for handling SCSI commands for Universal Flash Storage (UFS) devices. UFS is a high-performance flash storage technology commonly used in mobile devices and embedded systems. The scsi: ufs package provides the necessary drivers and functionality for interacting with UFS devices in the Linux operating system.
Vulnerability Detail
A deadlock vulnerability has been identified in the error handler of the scsi: ufs package. This vulnerability can be triggered under certain conditions, leading to a deadlock situation where the system becomes unresponsive. The exact cause and impact of the vulnerability have not been fully determined, but it is potentially exploitable by an attacker with local access to the system. The vulnerability has been fixed in version v5.15.25 of the Linux Kernel.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The scsi: ufs package in the Linux Kernel is vulnerable to a deadlock issue in its error handler. This vulnerability can potentially be exploited by an attacker with local access to the system, leading to a system deadlock. It is recommended to update the Linux Kernel to version v5.15.25 or later to fix the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The scsi: ufs package is a component of the Linux Kernel that handles SCSI commands for Universal Flash Storage (UFS) devices.
A deadlock vulnerability occurs when two or more processes or threads are unable to proceed because each is waiting for the other to release a resource.
The exact method of exploitation for this vulnerability has not been determined. However, it is potentially exploitable by an attacker with local access to the system.
Yes, the vulnerability has been fixed in version v5.15.25 of the Linux Kernel.
You can update the Linux Kernel by downloading the latest kernel source code from the official Linux Kernel repository and compiling it for your system. Alternatively, you can check if your system's package manager provides an update for the Linux Kernel and install it through the package manager.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
