In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
staging: fbtft: make dirty_lock IRQ-safe<\/p>\n
fbtft_mkdirty() can be reached from the fbcon rendering path while
\nprocessing printk() in hardirq context. Meanwhile, dirty_lock is also
\ntaken by fbtft_deferred_io() in workqueue context with local interrupts
\nenabled.<\/p>\n
Lockdep reports a possible IRQ lock inversion involving dirty_lock and
\nconsole_owner. A hardirq can interrupt a CPU holding dirty_lock and
\nenter the console rendering path, which can attempt to acquire
\ndirty_lock again.<\/p>\n
The following lockdep report was observed on an RK3566 system with
\nCONFIG_PROVE_LOCKING enabled:<\/p>\n
WARNING: possible irq lock inversion dependency detected
\n swapper\/2\/0 just changed the state of lock:
\n (console_owner){-…}-{0:0}
\n but this lock took another, HARDIRQ-unsafe lock in the past:
\n (&par->dirty_lock){+.+.}-{2:2}<\/p>\n
CPU0 CPU1
\n —- —-
\n lock(&par->dirty_lock);
\n local_irq_disable();
\n lock(console_owner);
\n lock(&par->dirty_lock);<\/p>\n
lock(console_owner);<\/p>\n
*** DEADLOCK ***<\/p>\n
Use spin_lock_irqsave() for fbtft_mkdirty() and spin_lock_irq() for
\nfbtft_deferred_io(). They only access the dirty line range, so the
\nIRQ-off regions remain short.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
staging: fbtft: make dirty_lock IRQ-safe<\/p>\n
fbtft_mkdirty() can be reached from the fbcon rendering path while
\nprocessing printk() in<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29249","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}