In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
i3c: master: Fix recursive locking during device registration<\/p>\n
i3c_master_register_new_i3c_devs() registers newly discovered devices
\nwhile holding i3c_bus_normaluse_lock(), a down_read(). device_register()
\ncan immediately probe the device, and probe callbacks typically invoke
\nI3C helpers that take i3c_bus_normaluse_lock() again, leading to a
\nrecursive acquisition of the same rwsem. rwsems do not support recursive
\nread locking and can deadlock when a writer is waiting. See the
\n“Recursive read locks” section of Documentation\/locking\/lockdep-design.rst.<\/p>\n
For example, with Intel LPSS I3C, LOCKDEP generates a WARNING like:
\n # echo intel-lpss-i3c.0 > \/sys\/bus\/platform\/drivers\/mipi-i3c-hci\/unbind
\n # echo intel-lpss-i3c.0 > \/sys\/bus\/platform\/drivers\/mipi-i3c-hci\/bind
\n WARNING: possible recursive locking detected
\n kworker\/5:1\/94 is trying to acquire lock:
\n ffff88811c810d78 (&i3cbus->lock){++++}-{4:4}, at: i3c_device_match_id+0x45\/0x370
\n but task is already holding lock:
\n ffff88811c810d78 (&i3cbus->lock){++++}-{4:4}, at: i3c_master_reg_work_fn+0x21\/0x5f0<\/p>\n
Fix this by separating device creation from device registration.
\nPopulate desc->dev under the maintenance lock, collect the devices that
\nstill need registration into a local list, then release the lock before
\ncalling device_register(). Finally retake the lock and clean up any
\ndevices that failed to register.<\/p>\n
Use the maintenance lock rather than the normal-use lock while adding
\ndevice objects. A write-side maintenance lock prevents readers from
\nobserving a partially initialized desc->dev during initial device
\npopulation, or desc->dev disappearing if registration fails.<\/p>\n
The local list requires a list node, so add a list node member to struct
\ni3c_device.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
i3c: master: Fix recursive locking during device registration<\/p>\n
i3c_master_register_new_i3c_devs() registers newly discovered device<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-26059","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/26059","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}