CVE-2024-50098

Summary

CVE-2024-50098 is a vulnerability in the Linux kernel affecting the scsi: ufs driver. During system shutdown, a deadlock occurred between the UFS and audio driver due to SDEV_QUIESCE being set for all LUs and a mutex lock held by the audio driver while reading the firmware binary. To prevent this issue, SDEV_OFFLINE is now set for all LUs except WLUN, causing any I/O that comes after a UFS shutdown to return an error instead. The following call traces show the involved functions during the shutdown process: `device_shutdown`, `kernel_restart`, `__arm64_sys_reboot`, and `__bio_queue_enter` in the audio and UFS drivers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.