CVE-2024-41036 (GCVE-0-2024-41036)

Vulnerability from cvelistv5 – Published: 2024-07-29 14:31 – Updated: 2026-08-05 11:34
VLAI
Title
net: ks8851: Fix deadlock with the SPI chip variant
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Fix deadlock with the SPI chip variant When SMP is enabled and spinlocks are actually functional then there is a deadlock with the 'statelock' spinlock between ks8851_start_xmit_spi and ks8851_irq: watchdog: BUG: soft lockup - CPU#0 stuck for 27s! call trace: queued_spin_lock_slowpath+0x100/0x284 do_raw_spin_lock+0x34/0x44 ks8851_start_xmit_spi+0x30/0xb8 ks8851_start_xmit+0x14/0x20 netdev_start_xmit+0x40/0x6c dev_hard_start_xmit+0x6c/0xbc sch_direct_xmit+0xa4/0x22c __qdisc_run+0x138/0x3fc qdisc_run+0x24/0x3c net_tx_action+0xf8/0x130 handle_softirqs+0x1ac/0x1f0 __do_softirq+0x14/0x20 ____do_softirq+0x10/0x1c call_on_irq_stack+0x3c/0x58 do_softirq_own_stack+0x1c/0x28 __irq_exit_rcu+0x54/0x9c irq_exit_rcu+0x10/0x1c el1_interrupt+0x38/0x50 el1h_64_irq_handler+0x18/0x24 el1h_64_irq+0x64/0x68 __netif_schedule+0x6c/0x80 netif_tx_wake_queue+0x38/0x48 ks8851_irq+0xb8/0x2c8 irq_thread_fn+0x2c/0x74 irq_thread+0x10c/0x1b0 kthread+0xc8/0xd8 ret_from_fork+0x10/0x20 This issue has not been identified earlier because tests were done on a device with SMP disabled and so spinlocks were actually NOPs. Now use spin_(un)lock_bh for TX queue related locking to avoid execution of softirq work synchronously that would lead to a deadlock.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:23 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 1092525155eaad5c69ca9f3b6f3e7895a9424d66 , < a0c69c492f4a8fad52f0a97565241c926160c9a4 (git)
Affected: 30302b41ffdcd194bef27fb3b1a9f2ca53dedb27 , < 80ece00137300d74642f2038c8fe5440deaf9f05 (git)
Affected: 3dc5d44545453de1de9c53cc529cc960a85933da , < 10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0 (git)
Affected: 3dc5d44545453de1de9c53cc529cc960a85933da , < 0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c (git)
Affected: 786788bb1396ed5ea27e39c4933f59f4e52004e4 (git)
Affected: 7c25c5d7274631b655f0f9098a16241fcd5db57b (git)
Affected: 6.1.70 , < 6.1.100 (semver)
Affected: 6.6.9 , < 6.6.41 (semver)
Affected: 5.10.206 , < 5.11 (semver)
Affected: 5.15.146 , < 5.16 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.7
Unaffected: 0 , < 6.7 (semver)
Unaffected: 6.1.100 , ≤ 6.1.* (semver)
Unaffected: 6.6.41 , ≤ 6.6.* (semver)
Unaffected: 6.9.10 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:59:33.670Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41036",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:23:30.114712Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:03.463Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/micrel/ks8851_common.c",
            "drivers/net/ethernet/micrel/ks8851_spi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a0c69c492f4a8fad52f0a97565241c926160c9a4",
              "status": "affected",
              "version": "1092525155eaad5c69ca9f3b6f3e7895a9424d66",
              "versionType": "git"
            },
            {
              "lessThan": "80ece00137300d74642f2038c8fe5440deaf9f05",
              "status": "affected",
              "version": "30302b41ffdcd194bef27fb3b1a9f2ca53dedb27",
              "versionType": "git"
            },
            {
              "lessThan": "10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0",
              "status": "affected",
              "version": "3dc5d44545453de1de9c53cc529cc960a85933da",
              "versionType": "git"
            },
            {
              "lessThan": "0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c",
              "status": "affected",
              "version": "3dc5d44545453de1de9c53cc529cc960a85933da",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "786788bb1396ed5ea27e39c4933f59f4e52004e4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7c25c5d7274631b655f0f9098a16241fcd5db57b",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.100",
              "status": "affected",
              "version": "6.1.70",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.41",
              "status": "affected",
              "version": "6.6.9",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.206",
              "versionType": "semver"
            },
            {
              "lessThan": "5.16",
              "status": "affected",
              "version": "5.15.146",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/micrel/ks8851_common.c",
            "drivers/net/ethernet/micrel/ks8851_spi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.7"
            },
            {
              "lessThan": "6.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.100",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.41",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.100",
                  "versionStartIncluding": "6.1.70",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.41",
                  "versionStartIncluding": "6.6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.10",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.206",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.15.146",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ks8851: Fix deadlock with the SPI chip variant\n\nWhen SMP is enabled and spinlocks are actually functional then there is\na deadlock with the \u0027statelock\u0027 spinlock between ks8851_start_xmit_spi\nand ks8851_irq:\n\n    watchdog: BUG: soft lockup - CPU#0 stuck for 27s!\n    call trace:\n      queued_spin_lock_slowpath+0x100/0x284\n      do_raw_spin_lock+0x34/0x44\n      ks8851_start_xmit_spi+0x30/0xb8\n      ks8851_start_xmit+0x14/0x20\n      netdev_start_xmit+0x40/0x6c\n      dev_hard_start_xmit+0x6c/0xbc\n      sch_direct_xmit+0xa4/0x22c\n      __qdisc_run+0x138/0x3fc\n      qdisc_run+0x24/0x3c\n      net_tx_action+0xf8/0x130\n      handle_softirqs+0x1ac/0x1f0\n      __do_softirq+0x14/0x20\n      ____do_softirq+0x10/0x1c\n      call_on_irq_stack+0x3c/0x58\n      do_softirq_own_stack+0x1c/0x28\n      __irq_exit_rcu+0x54/0x9c\n      irq_exit_rcu+0x10/0x1c\n      el1_interrupt+0x38/0x50\n      el1h_64_irq_handler+0x18/0x24\n      el1h_64_irq+0x64/0x68\n      __netif_schedule+0x6c/0x80\n      netif_tx_wake_queue+0x38/0x48\n      ks8851_irq+0xb8/0x2c8\n      irq_thread_fn+0x2c/0x74\n      irq_thread+0x10c/0x1b0\n      kthread+0xc8/0xd8\n      ret_from_fork+0x10/0x20\n\nThis issue has not been identified earlier because tests were done on\na device with SMP disabled and so spinlocks were actually NOPs.\n\nNow use spin_(un)lock_bh for TX queue related locking to avoid execution\nof softirq work synchronously that would lead to a deadlock."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The deadlock is driven by TX saturation of the ks8851 Ethernet interface, which any remote peer can induce by sending traffic that the device must answer (ICMP echo, TCP responses from an exposed service); such traffic is routable and not confined to the local L2 segment.\nAC:L - The attacker fully controls the required precondition (TX queue congestion) and can replay the vulnerable stop/wake cycle thousands of times per second across two separate BH-enabled statelock windows (ks8851_irq and ks8851_tx_work), so the interrupt-arrival window is hit reliably under sustained load \u2014 as observed in practice by the reporter.\nPR:N - There is no authentication or capability check anywhere on the path; the trigger is ordinary qdisc transmit activity, and a remote unauthenticated attacker only needs to elicit packets from the device (e.g. ICMP echo replies).\nUI:N - No victim action is required; the deadlock arises purely from attacker-generated network load against a configured, running interface.\nS:U - The recursive spinlock acquisition hangs the CPU within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The bug is a lock-recursion deadlock with no out-of-bounds access, uninitialized data use, or memory corruption, so no information is disclosed.\nI:N - No memory is corrupted and no data is modified; the CPU simply spins forever on an already-held spinlock, offering no write or control-flow primitive.\nA:H - The affected CPU spins permanently in queued_spin_lock_slowpath with preemption disabled, producing a soft lockup, a permanently dead network interface, and on the single- or few-core embedded systems that use this SPI NIC a full system hang requiring a watchdog reset."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:34:52.816Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4"
        },
        {
          "url": "https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05"
        },
        {
          "url": "https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0"
        },
        {
          "url": "https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c"
        }
      ],
      "title": "net: ks8851: Fix deadlock with the SPI chip variant",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-41036",
    "datePublished": "2024-07-29T14:31:50.669Z",
    "dateReserved": "2024-07-12T12:17:45.620Z",
    "dateUpdated": "2026-08-05T11:34:52.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-41036",
      "date": "2026-08-19",
      "epss": "0.00751",
      "percentile": "0.5217"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.1.70\", \"versionEndExcluding\": \"6.1.100\", \"matchCriteriaId\": \"62A1E90D-66EF-4935-9B5A-0C9DD20DA25F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.6.9\", \"versionEndExcluding\": \"6.6.41\", \"matchCriteriaId\": \"C2EC65E2-E54C-4F45-AB93-1CE29E8D0E59\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.9.10\", \"matchCriteriaId\": \"AB2E8DEC-CFD5-4C2B-981D-E7E45A36C352\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"331C2F14-12C7-45D5-893D-8C52EE38EA10\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"3173713D-909A-4DD3-9DD4-1E171EB057EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"79F18AFA-40F7-43F0-BA30-7BDB65F918B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD973AA4-A789-49BD-8D57-B2846935D3C7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F3E9E0C-AC3E-4967-AF80-6483E8AB0078\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.10:rc7:*:*:*:*:*:*\", \"matchCriteriaId\": \"11AF4CB9-F697-4EA4-8903-8F9417EFDA8E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ks8851: Fix deadlock with the SPI chip variant\\n\\nWhen SMP is enabled and spinlocks are actually functional then there is\\na deadlock with the \u0027statelock\u0027 spinlock between ks8851_start_xmit_spi\\nand ks8851_irq:\\n\\n    watchdog: BUG: soft lockup - CPU#0 stuck for 27s!\\n    call trace:\\n      queued_spin_lock_slowpath+0x100/0x284\\n      do_raw_spin_lock+0x34/0x44\\n      ks8851_start_xmit_spi+0x30/0xb8\\n      ks8851_start_xmit+0x14/0x20\\n      netdev_start_xmit+0x40/0x6c\\n      dev_hard_start_xmit+0x6c/0xbc\\n      sch_direct_xmit+0xa4/0x22c\\n      __qdisc_run+0x138/0x3fc\\n      qdisc_run+0x24/0x3c\\n      net_tx_action+0xf8/0x130\\n      handle_softirqs+0x1ac/0x1f0\\n      __do_softirq+0x14/0x20\\n      ____do_softirq+0x10/0x1c\\n      call_on_irq_stack+0x3c/0x58\\n      do_softirq_own_stack+0x1c/0x28\\n      __irq_exit_rcu+0x54/0x9c\\n      irq_exit_rcu+0x10/0x1c\\n      el1_interrupt+0x38/0x50\\n      el1h_64_irq_handler+0x18/0x24\\n      el1h_64_irq+0x64/0x68\\n      __netif_schedule+0x6c/0x80\\n      netif_tx_wake_queue+0x38/0x48\\n      ks8851_irq+0xb8/0x2c8\\n      irq_thread_fn+0x2c/0x74\\n      irq_thread+0x10c/0x1b0\\n      kthread+0xc8/0xd8\\n      ret_from_fork+0x10/0x20\\n\\nThis issue has not been identified earlier because tests were done on\\na device with SMP disabled and so spinlocks were actually NOPs.\\n\\nNow use spin_(un)lock_bh for TX queue related locking to avoid execution\\nof softirq work synchronously that would lead to a deadlock.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ks8851: Se corrige el interbloqueo con la variante del chip SPI Cuando SMP est\\u00e1 habilitado y los spinlocks son realmente funcionales, entonces hay un interbloqueo con el spinlock \u0027statelock\u0027 entre ks8851_start_xmit_spi y ks8851_irq: watchdog: ERROR: bloqueo suave: \\u00a1CPU n.\\u00b0 0 se atasc\\u00f3 durante 27 segundos! seguimiento de llamadas: queued_spin_lock_slowpath+0x100/0x284 do_raw_spin_lock+0x34/0x44 ks8851_start_xmit_spi+0x30/0xb8 ks8851_start_xmit+0x14/0x20 netdev_start_xmit+0x40/0x6c 0xbc sch_direct_xmit+0xa4/0x22c __qdisc_run+0x138/0x3fc qdisc_run+0x24/0x3c net_tx_action+ 0xf8/0x130 handle_softirqs+0x1ac/0x1f0 __do_softirq+0x14/0x20 ____do_softirq+0x10/0x1c call_on_irq_stack+0x3c/0x58 do_softirq_own_stack+0x1c/0x28 __irq_exit_rcu+0x54/0x9c _exit_rcu+0x10/0x1c el1_interrupt+0x38/0x50 el1h_64_irq_handler+0x18/0x24 el1h_64_irq+ 0x64/0x68 __netif_schedule+0x6c/0x80 netif_tx_wake_queue+0x38/0x48 ks8851_irq+0xb8/0x2c8 irq_thread_fn+0x2c/0x74 irq_thread+0x10c/0x1b0 kthread+0xc8/0xd8 k+0x10/0x20 Este problema no se identific\\u00f3 anteriormente porque se realizaron pruebas en un dispositivo con SMP deshabilitado y, por lo tanto, los spinlocks eran en realidad NOP. Ahora use spin_(un)lock_bh para el bloqueo relacionado con la cola TX para evitar la ejecuci\\u00f3n del trabajo de softirq de forma sincr\\u00f3nica que conducir\\u00eda a un punto muerto.\"}]",
      "id": "CVE-2024-41036",
      "lastModified": "2024-11-21T09:32:06.697",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-07-29T15:15:12.170",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-667\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-41036\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-29T15:15:12.170\",\"lastModified\":\"2026-08-04T11:19:20.763\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ks8851: Fix deadlock with the SPI chip variant\\n\\nWhen SMP is enabled and spinlocks are actually functional then there is\\na deadlock with the \u0027statelock\u0027 spinlock between ks8851_start_xmit_spi\\nand ks8851_irq:\\n\\n    watchdog: BUG: soft lockup - CPU#0 stuck for 27s!\\n    call trace:\\n      queued_spin_lock_slowpath+0x100/0x284\\n      do_raw_spin_lock+0x34/0x44\\n      ks8851_start_xmit_spi+0x30/0xb8\\n      ks8851_start_xmit+0x14/0x20\\n      netdev_start_xmit+0x40/0x6c\\n      dev_hard_start_xmit+0x6c/0xbc\\n      sch_direct_xmit+0xa4/0x22c\\n      __qdisc_run+0x138/0x3fc\\n      qdisc_run+0x24/0x3c\\n      net_tx_action+0xf8/0x130\\n      handle_softirqs+0x1ac/0x1f0\\n      __do_softirq+0x14/0x20\\n      ____do_softirq+0x10/0x1c\\n      call_on_irq_stack+0x3c/0x58\\n      do_softirq_own_stack+0x1c/0x28\\n      __irq_exit_rcu+0x54/0x9c\\n      irq_exit_rcu+0x10/0x1c\\n      el1_interrupt+0x38/0x50\\n      el1h_64_irq_handler+0x18/0x24\\n      el1h_64_irq+0x64/0x68\\n      __netif_schedule+0x6c/0x80\\n      netif_tx_wake_queue+0x38/0x48\\n      ks8851_irq+0xb8/0x2c8\\n      irq_thread_fn+0x2c/0x74\\n      irq_thread+0x10c/0x1b0\\n      kthread+0xc8/0xd8\\n      ret_from_fork+0x10/0x20\\n\\nThis issue has not been identified earlier because tests were done on\\na device with SMP disabled and so spinlocks were actually NOPs.\\n\\nNow use spin_(un)lock_bh for TX queue related locking to avoid execution\\nof softirq work synchronously that would lead to a deadlock.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ks8851: Se corrige el interbloqueo con la variante del chip SPI Cuando SMP est\u00e1 habilitado y los spinlocks son realmente funcionales, entonces hay un interbloqueo con el spinlock \u0027statelock\u0027 entre ks8851_start_xmit_spi y ks8851_irq: watchdog: ERROR: bloqueo suave: \u00a1CPU n.\u00b0 0 se atasc\u00f3 durante 27 segundos! seguimiento de llamadas: queued_spin_lock_slowpath+0x100/0x284 do_raw_spin_lock+0x34/0x44 ks8851_start_xmit_spi+0x30/0xb8 ks8851_start_xmit+0x14/0x20 netdev_start_xmit+0x40/0x6c 0xbc sch_direct_xmit+0xa4/0x22c __qdisc_run+0x138/0x3fc qdisc_run+0x24/0x3c net_tx_action+ 0xf8/0x130 handle_softirqs+0x1ac/0x1f0 __do_softirq+0x14/0x20 ____do_softirq+0x10/0x1c call_on_irq_stack+0x3c/0x58 do_softirq_own_stack+0x1c/0x28 __irq_exit_rcu+0x54/0x9c _exit_rcu+0x10/0x1c el1_interrupt+0x38/0x50 el1h_64_irq_handler+0x18/0x24 el1h_64_irq+ 0x64/0x68 __netif_schedule+0x6c/0x80 netif_tx_wake_queue+0x38/0x48 ks8851_irq+0xb8/0x2c8 irq_thread_fn+0x2c/0x74 irq_thread+0x10c/0x1b0 kthread+0xc8/0xd8 k+0x10/0x20 Este problema no se identific\u00f3 anteriormente porque se realizaron pruebas en un dispositivo con SMP deshabilitado y, por lo tanto, los spinlocks eran en realidad NOP. Ahora use spin_(un)lock_bh para el bloqueo relacionado con la cola TX para evitar la ejecuci\u00f3n del trabajo de softirq de forma sincr\u00f3nica que conducir\u00eda a un punto muerto.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/micrel/ks8851_common.c\",\"drivers/net/ethernet/micrel/ks8851_spi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"1092525155eaad5c69ca9f3b6f3e7895a9424d66\",\"lessThan\":\"a0c69c492f4a8fad52f0a97565241c926160c9a4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30302b41ffdcd194bef27fb3b1a9f2ca53dedb27\",\"lessThan\":\"80ece00137300d74642f2038c8fe5440deaf9f05\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3dc5d44545453de1de9c53cc529cc960a85933da\",\"lessThan\":\"10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3dc5d44545453de1de9c53cc529cc960a85933da\",\"lessThan\":\"0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"786788bb1396ed5ea27e39c4933f59f4e52004e4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7c25c5d7274631b655f0f9098a16241fcd5db57b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.1.70\",\"lessThan\":\"6.1.100\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.9\",\"lessThan\":\"6.6.41\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.206\",\"lessThan\":\"5.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.146\",\"lessThan\":\"5.16\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/micrel/ks8851_common.c\",\"drivers/net/ethernet/micrel/ks8851_spi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.7\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.7\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.100\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.41\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.10\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:23:30.114712Z\",\"id\":\"CVE-2024-41036\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.70\",\"versionEndExcluding\":\"6.1.100\",\"matchCriteriaId\":\"62A1E90D-66EF-4935-9B5A-0C9DD20DA25F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.9\",\"versionEndExcluding\":\"6.6.41\",\"matchCriteriaId\":\"C2EC65E2-E54C-4F45-AB93-1CE29E8D0E59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.9.10\",\"matchCriteriaId\":\"AB2E8DEC-CFD5-4C2B-981D-E7E45A36C352\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"331C2F14-12C7-45D5-893D-8C52EE38EA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3173713D-909A-4DD3-9DD4-1E171EB057EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"79F18AFA-40F7-43F0-BA30-7BDB65F918B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD973AA4-A789-49BD-8D57-B2846935D3C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F3E9E0C-AC3E-4967-AF80-6483E8AB0078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"11AF4CB9-F697-4EA4-8903-8F9417EFDA8E\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:44:14+00:00",
      "cve": "CVE-2024-41036",
      "id": "CVE-2024-41036",
      "initial_release_date": "2024-07-29T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: ks8851: Fix deadlock with the SPI chip variant",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41036.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-23T02:03:20Z",
      "cve": "CVE-2024-41036",
      "id": "CVE-2024-41036",
      "initial_release_date": "2024-08-06T02:01:59Z",
      "product_status:known_affected": "340",
      "product_status:known_not_affected": "204",
      "product_status:recommended": "648",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-41036",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-41036.json",
      "version": "61"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T21:59:33.670Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-41036\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:23:30.114712Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:20.398Z\"}}], \"cna\": {\"title\": \"net: ks8851: Fix deadlock with the SPI chip variant\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:N - The deadlock is driven by TX saturation of the ks8851 Ethernet interface, which any remote peer can induce by sending traffic that the device must answer (ICMP echo, TCP responses from an exposed service); such traffic is routable and not confined to the local L2 segment.\\nAC:L - The attacker fully controls the required precondition (TX queue congestion) and can replay the vulnerable stop/wake cycle thousands of times per second across two separate BH-enabled statelock windows (ks8851_irq and ks8851_tx_work), so the interrupt-arrival window is hit reliably under sustained load \\u2014 as observed in practice by the reporter.\\nPR:N - There is no authentication or capability check anywhere on the path; the trigger is ordinary qdisc transmit activity, and a remote unauthenticated attacker only needs to elicit packets from the device (e.g. ICMP echo replies).\\nUI:N - No victim action is required; the deadlock arises purely from attacker-generated network load against a configured, running interface.\\nS:U - The recursive spinlock acquisition hangs the CPU within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\\nC:N - The bug is a lock-recursion deadlock with no out-of-bounds access, uninitialized data use, or memory corruption, so no information is disclosed.\\nI:N - No memory is corrupted and no data is modified; the CPU simply spins forever on an already-held spinlock, offering no write or control-flow primitive.\\nA:H - The affected CPU spins permanently in queued_spin_lock_slowpath with preemption disabled, producing a soft lockup, a permanently dead network interface, and on the single- or few-core embedded systems that use this SPI NIC a full system hang requiring a watchdog reset.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"1092525155eaad5c69ca9f3b6f3e7895a9424d66\", \"lessThan\": \"a0c69c492f4a8fad52f0a97565241c926160c9a4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30302b41ffdcd194bef27fb3b1a9f2ca53dedb27\", \"lessThan\": \"80ece00137300d74642f2038c8fe5440deaf9f05\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3dc5d44545453de1de9c53cc529cc960a85933da\", \"lessThan\": \"10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3dc5d44545453de1de9c53cc529cc960a85933da\", \"lessThan\": \"0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"786788bb1396ed5ea27e39c4933f59f4e52004e4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"7c25c5d7274631b655f0f9098a16241fcd5db57b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6.1.70\", \"lessThan\": \"6.1.100\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.6.9\", \"lessThan\": \"6.6.41\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.10.206\", \"lessThan\": \"5.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.146\", \"lessThan\": \"5.16\", \"versionType\": \"semver\"}], \"programFiles\": [\"drivers/net/ethernet/micrel/ks8851_common.c\", \"drivers/net/ethernet/micrel/ks8851_spi.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.7\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.7\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.100\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.41\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/ethernet/micrel/ks8851_common.c\", \"drivers/net/ethernet/micrel/ks8851_spi.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/a0c69c492f4a8fad52f0a97565241c926160c9a4\"}, {\"url\": \"https://git.kernel.org/stable/c/80ece00137300d74642f2038c8fe5440deaf9f05\"}, {\"url\": \"https://git.kernel.org/stable/c/10fec0cd0e8f56ff06c46bb24254c7d8f8f2bbf0\"}, {\"url\": \"https://git.kernel.org/stable/c/0913ec336a6c0c4a2b296bd9f74f8e41c4c83c8c\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ks8851: Fix deadlock with the SPI chip variant\\n\\nWhen SMP is enabled and spinlocks are actually functional then there is\\na deadlock with the \u0027statelock\u0027 spinlock between ks8851_start_xmit_spi\\nand ks8851_irq:\\n\\n    watchdog: BUG: soft lockup - CPU#0 stuck for 27s!\\n    call trace:\\n      queued_spin_lock_slowpath+0x100/0x284\\n      do_raw_spin_lock+0x34/0x44\\n      ks8851_start_xmit_spi+0x30/0xb8\\n      ks8851_start_xmit+0x14/0x20\\n      netdev_start_xmit+0x40/0x6c\\n      dev_hard_start_xmit+0x6c/0xbc\\n      sch_direct_xmit+0xa4/0x22c\\n      __qdisc_run+0x138/0x3fc\\n      qdisc_run+0x24/0x3c\\n      net_tx_action+0xf8/0x130\\n      handle_softirqs+0x1ac/0x1f0\\n      __do_softirq+0x14/0x20\\n      ____do_softirq+0x10/0x1c\\n      call_on_irq_stack+0x3c/0x58\\n      do_softirq_own_stack+0x1c/0x28\\n      __irq_exit_rcu+0x54/0x9c\\n      irq_exit_rcu+0x10/0x1c\\n      el1_interrupt+0x38/0x50\\n      el1h_64_irq_handler+0x18/0x24\\n      el1h_64_irq+0x64/0x68\\n      __netif_schedule+0x6c/0x80\\n      netif_tx_wake_queue+0x38/0x48\\n      ks8851_irq+0xb8/0x2c8\\n      irq_thread_fn+0x2c/0x74\\n      irq_thread+0x10c/0x1b0\\n      kthread+0xc8/0xd8\\n      ret_from_fork+0x10/0x20\\n\\nThis issue has not been identified earlier because tests were done on\\na device with SMP disabled and so spinlocks were actually NOPs.\\n\\nNow use spin_(un)lock_bh for TX queue related locking to avoid execution\\nof softirq work synchronously that would lead to a deadlock.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.100\", \"versionStartIncluding\": \"6.1.70\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.41\", \"versionStartIncluding\": \"6.6.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.10\", \"versionStartIncluding\": \"6.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"6.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.10.206\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.15.146\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:34:52.816Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-41036\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:34:52.816Z\", \"dateReserved\": \"2024-07-12T12:17:45.620Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-29T14:31:50.669Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.