CVE - CVE-2024-27009

CVE-ID
CVE-2024-27009	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in ccw_device_set_online() that can cause the online process to fail, leaving the affected device in an inconsistent state. As a result, subsequent attempts to set that device online fail with return code ENODEV. The problem occurs when a path verification request arrives after a wait for final device state completed, but before the result state is evaluated. Fix this by ensuring that the CCW-device lock is held between determining final state and checking result state. Note that since: commit 2297791c92d0 ("s390/cio: dont unregister subchannel from child-drivers") path verification requests are much more likely to occur during boot, resulting in an increased chance of this race condition occurring.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2d8527f2f911fab84aec04df4788c0c23af3df48 URL:https://git.kernel.org/stable/c/2d8527f2f911fab84aec04df4788c0c23af3df48 MISC:https://git.kernel.org/stable/c/2df56f4ea769ff81e51bbb05699989603bde9c49 URL:https://git.kernel.org/stable/c/2df56f4ea769ff81e51bbb05699989603bde9c49 MISC:https://git.kernel.org/stable/c/3076b3c38a704e10df5e143c213653309d532538 URL:https://git.kernel.org/stable/c/3076b3c38a704e10df5e143c213653309d532538 MISC:https://git.kernel.org/stable/c/559f3a6333397ab6cd4a696edd65a70b6be62c6e URL:https://git.kernel.org/stable/c/559f3a6333397ab6cd4a696edd65a70b6be62c6e MISC:https://git.kernel.org/stable/c/a4234decd0fe429832ca81c4637be7248b88b49e URL:https://git.kernel.org/stable/c/a4234decd0fe429832ca81c4637be7248b88b49e
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)