CVE-2024-53053 scsi: ufs: core: Fix another deadlock during RTC update
A deadlock in the Linux kernel UFS driver during RTC updates can cause a system hang, requiring a patch to resolve.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53053?
CVE-2024-53053 is a medium-severity vulnerability in Linux kernel, published on 19 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix another deadlock during RTC update
If ufshcd_rtc_work calls ufshcd_rpm_put_sync() and the pm's usage_count is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush ufshcd_rtc_work, causing a deadlock.
Replace ufshcd_rpm_put_sync() with ufshcd_rpm_put() to avoid the deadlock.
Weakness: CWE-667
Which versions are affected by CVE-2024-53053?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53053?
Apply the vendor's patch.
Is CVE-2024-53053 being exploited?
There is no known exploitation of CVE-2024-53053 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-53053, DEBIAN-CVE-2024-53053, GHSA-qq67-p454-7jfc, UBUNTU-CVE-2024-53053.