CVE-2024-44953

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Fix deadlock during RTC update

There is a deadlock when runtime suspend waits for the flush of RTC work,

and the RTC work calls ufshcd_rpm_get_sync() to wait for runtime resume.

Here is deadlock backtrace:

kworker/0:1 D 4892.876354 10 10971 4859 0x4208060 0x8 10 0 120 670730152367

ptr f0ffff80c2e40000 0 1 0x00000001 0x000000ff 0x000000ff 0x000000ff

<ffffffee5e71ddb0> __switch_to+0x1a8/0x2d4

<ffffffee5e71e604> __schedule+0x684/0xa98

<ffffffee5e71ea60> schedule+0x48/0xc8

<ffffffee5e725f78> schedule_timeout+0x48/0x170

<ffffffee5e71fb74> do_wait_for_common+0x108/0x1b0

<ffffffee5e71efe0> wait_for_completion+0x44/0x60

<ffffffee5d6de968> __flush_work+0x39c/0x424

<ffffffee5d6decc0> __cancel_work_sync+0xd8/0x208

<ffffffee5d6dee2c> cancel_delayed_work_sync+0x14/0x28

<ffffffee5e2551b8> __ufshcd_wl_suspend+0x19c/0x480

<ffffffee5e255fb8> ufshcd_wl_runtime_suspend+0x3c/0x1d4

<ffffffee5dffd80c> scs

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References