In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()<\/p>\n
usbg_make_tpg() held dep_lock while calling
\nconfigfs_depend_item_unlocked(), which acquires the configfs root
\ninode lock when operating across subsystems. This creates a circular
\nlock dependency with configfs_rmdir():<\/p>\n
dep_lock -> configfs root inode lock -> su_mutex -> dep_lock<\/p>\n
In usbg_make_tpg(), dep_lock only serialized the read of opts->ready,
\nwhich is a monotonic flag that transitions from false to true exactly
\nonce (in tcm_set_name()) and never reverts. Remove dep_lock from
\nusbg_make_tpg() entirely and use READ_ONCE\/WRITE_ONCE to access
\nopts->ready locklessly instead.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()<\/p>\n
usbg_make_tpg() held dep_lock while calling
\nconfigfs_depend_item_unlocked(), w<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28478","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28478","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28478"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}