Updated: 2024-11-08 21:16:46.505577
Description:
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change rfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it causing the following trace: ====================================================== WARNING: possible circular locking dependency detected 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted ------------------------------------------------------ syz-executor386/5093 is trying to acquire lock: ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1671 [inline] ffff88807c396258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 net/bluetooth/rfcomm/sock.c:73 but task is already holding lock: ffff88807badfd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 net/bluetooth/rfcomm/core.c:491
| Links | NIST | CIRCL | RHEL | Ubuntu |
| Severity | Score | |
|---|---|---|
| CVSS Version 2.x | 0 | |
| CVSS Version 3.x | LOW | 3.3 |
| OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
|---|---|---|---|---|---|---|---|---|
| AlmaLinux 9.2 ESU | kernel | 5.14.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| AlmaLinux 9.2 FIPS | kernel | 5.14.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CentOS 6 ELS | kernel | 2.6.32 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CentOS 7 ELS | kernel | 3.10.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CentOS 8.4 ELS | kernel | 4.18.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CentOS 8.5 ELS | kernel | 4.18.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CentOS Stream 8 ELS | kernel | 4.18.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:20 | ||
| CloudLinux 6 ELS | kernel | 2.6.32 | 3.3 | LOW | Ignored | 2024-11-05 04:30:21 | ||
| CloudLinux 7 ELS | kernel | 3.10.0 | 3.3 | LOW | Ignored | 2024-11-05 04:30:20 | ||
| Oracle Linux 6 ELS | kernel | 2.6.32 | 3.3 | LOW | Ignored | 2024-11-05 04:30:20 |