CVE-2024-26775

Summary

CVE-2024-26775 is a vulnerability affecting the Linux kernel. It involves a potential deadlock in the 'aoe' subsystem during the 'set_capacity' function call. Specifically, the issue arises due to a dependency between locks '&d->lock' and '&bdev->bd_size_lock', causing a deadlock situation. To resolve this, the 'set_capacity()' function must be moved outside of the section protected by '&d->lock'. This change breaks the lock dependency and prevents the deadlock scenario.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.