VDB

DEBIAN-CVE-2024-47739

DEBIAN-CVE-2024-47739 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When submitting more than 2^32 padata objects to padata_do_serial, the current sorting implementation incorrectly sorts padata objects with overflowed seq_nr, causing them to be placed before existing objects in the reorder list. This leads to a deadlock in the serialization process as padata_find_next cannot match padata->seq_nr and pd->processed because the padata instance with overflowed seq_nr will be selected next. To fix this, we use an unsigned integer wrap around to correctly sort padata objects in scenarios with integer overflow.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:12linux6.1.38-4, 6.1.94-1~bpo11+1, 6.1.66-1
Debian:11linux-6.16.1.106-3, 6.1.112-1~deb11u1, *
Debian:13linux0, 0
Debian:14linux0, 0
Debian:11linux5.10.209-2, 5.10.216-1, 5.10.218-1

Timeline

  • Oct 21, 2024 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›