CVE-2024-40922
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-40922
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40922.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-40922
- Downstream
- Related
- Published
- 2024-07-12T12:25:03Z
- Modified
- 2025-10-17T03:19:24.799687Z
- Summary
- io_uring/rsrc: don't lock while !TASK_RUNNING
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iouring/rsrc: don't lock while !TASKRUNNING
There is a report of iorsrcrefquiesce() locking a mutex while not TASKRUNNING, which is due to forgetting restoring the state back after ioruntaskworksig() and attempts to break out of the waiting loop.
do not call blocking ops when !TASKRUNNING; state=1 set at [<ffffffff815d2494>] preparetowait+0xa4/0x380 kernel/sched/wait.c:237 WARNING: CPU: 2 PID: 397056 at kernel/sched/core.c:10099 mightsleep+0x114/0x160 kernel/sched/core.c:10099 RIP: 0010:mightsleep+0x114/0x160 kernel/sched/core.c:10099 Call Trace: <TASK> _mutexlockcommon kernel/locking/mutex.c:585 [inline] _mutexlock+0xb4/0x940 kernel/locking/mutex.c:752 iorsrcrefquiesce+0x590/0x940 iouring/rsrc.c:253 iosqebuffersunregister+0xa2/0x340 iouring/rsrc.c:799 _iouringregister iouring/register.c:424 [inline] _dosysiouringregister+0x5b9/0x2400 iouring/register.c:613 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xd8/0x270 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x6f/0x77
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced4ea15b56f0810f0d8795d475db1bb74b3a7c1b2fFixed0c9df3df0c888d9ec8d11a68474a4aa04d371cff
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced4ea15b56f0810f0d8795d475db1bb74b3a7c1b2fFixed4429c6c77e176a4c5aa7a3bbd1632f9fc0582518
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced4ea15b56f0810f0d8795d475db1bb74b3a7c1b2fFixed54559642b96116b45e4b5ca7fd9f7835b8561272