net/qla3xxx: Fix schedule while atomic in ql_sem_spinlock
Summary
UVI-2021-1000829: net/qla3xxx: fix schedule while atomic in ql_sem_spinlock. Affects Kernel versions < 9cfaf83a961115f4d63a6fed029bf56aae6713cd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/qla3xxx package is part of the Linux Kernel ecosystem and is responsible for managing the QLogic Fibre Channel Host Bus Adapter (HBA) driver. This driver enables communication between the Linux operating system and QLogic Fibre Channel HBAs. The ql_sem_spinlock function in the qla3xxx driver is vulnerable to a schedule while atomic issue.
Vulnerability Detail
The vulnerability in the ql_sem_spinlock function allows for a schedule while atomic scenario, which can lead to a system deadlock. This occurs when the function is called in an atomic context, such as within an interrupt handler, and it attempts to acquire a semaphore that is already held by another process. As a result, the system may become unresponsive or crash, impacting the availability and stability of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The net/qla3xxx package in the Linux Kernel is vulnerable to a schedule while atomic issue in the ql_sem_spinlock function. This can result in system deadlocks and impact the availability and stability of the affected system. It is recommended to update the Linux Kernel to version v4.4.273 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system deadlock, causing the affected system to become unresponsive or crash.
The vulnerability is present in versions of the Linux Kernel prior to v4.4.273.
Yes, the vulnerability has been fixed in Linux Kernel version v4.4.273 by commit 9cfaf83a961115f4d63a6fed029bf56aae6713cd.
More information about this vulnerability can be found in the Open Source Vulnerability Database (OSVDB) entry with ID UVI-2021-1000829.
Users can update the Linux Kernel by obtaining the latest version from the official Linux Kernel repository and following the installation instructions provided.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
