GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-41080 (GCVE-0-2024-41080)

Vulnerability from cvelistv5 – Published: 2024-07-29 15:04 – Updated: 2026-05-11 20:25
VLAI
Title
io_uring: fix possible deadlock in io_register_iowq_max_workers()
Summary
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_max_workers() function calls io_put_sq_data(), which acquires the sqd->lock without releasing the uring_lock. Similar to the commit 009ad9f0c6ee ("io_uring: drop ctx->uring_lock before acquiring sqd->lock"), this can lead to a potential deadlock situation. To resolve this issue, the uring_lock is released before calling io_put_sq_data(), and then it is re-acquired after the function call. This change ensures that the locks are acquired in the correct order, preventing the possibility of a deadlock.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:21 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < b17397a0a5c56e111f61cb5b77d162664dc00de9 (git)
Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < 97ed7ff58de66c544692b3c2b988f3f594348de0 (git)
Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < fdacd09f2ddf7a00787291f08ee48c0421e5b709 (git)
Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < 950ac86cff338ab56e2eaf611f4936ee34893b63 (git)
Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < b571a367502c7ef94c688ef9c7f7d69a2ce3bcca (git)
Affected: 2b188cc1bb857a9d4701ae59aa7768b5124e262e , < 73254a297c2dd094abec7c9efee32455ae875bdf (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.1
Unaffected: 0 , < 5.1 (semver)
Unaffected: 5.10.230 , ≤ 5.10.* (semver)
Unaffected: 5.15.173 , ≤ 5.15.* (semver)
Unaffected: 6.1.118 , ≤ 6.1.* (semver)
Unaffected: 6.6.62 , ≤ 6.6.* (semver)
Unaffected: 6.9.11 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:00:38.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41080",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:21:08.458402Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:59.495Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "io_uring/register.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b17397a0a5c56e111f61cb5b77d162664dc00de9",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            },
            {
              "lessThan": "97ed7ff58de66c544692b3c2b988f3f594348de0",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            },
            {
              "lessThan": "fdacd09f2ddf7a00787291f08ee48c0421e5b709",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            },
            {
              "lessThan": "950ac86cff338ab56e2eaf611f4936ee34893b63",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            },
            {
              "lessThan": "b571a367502c7ef94c688ef9c7f7d69a2ce3bcca",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            },
            {
              "lessThan": "73254a297c2dd094abec7c9efee32455ae875bdf",
              "status": "affected",
              "version": "2b188cc1bb857a9d4701ae59aa7768b5124e262e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "io_uring/register.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.230",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.62",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.230",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.173",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.118",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.62",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.11",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix possible deadlock in io_register_iowq_max_workers()\n\nThe io_register_iowq_max_workers() function calls io_put_sq_data(),\nwhich acquires the sqd-\u003elock without releasing the uring_lock.\nSimilar to the commit 009ad9f0c6ee (\"io_uring: drop ctx-\u003euring_lock\nbefore acquiring sqd-\u003elock\"), this can lead to a potential deadlock\nsituation.\n\nTo resolve this issue, the uring_lock is released before calling\nio_put_sq_data(), and then it is re-acquired after the function call.\n\nThis change ensures that the locks are acquired in the correct\norder, preventing the possibility of a deadlock."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:25:48.375Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b17397a0a5c56e111f61cb5b77d162664dc00de9"
        },
        {
          "url": "https://git.kernel.org/stable/c/97ed7ff58de66c544692b3c2b988f3f594348de0"
        },
        {
          "url": "https://git.kernel.org/stable/c/fdacd09f2ddf7a00787291f08ee48c0421e5b709"
        },
        {
          "url": "https://git.kernel.org/stable/c/950ac86cff338ab56e2eaf611f4936ee34893b63"
        },
        {
          "url": "https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca"
        },
        {
          "url": "https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf"
        }
      ],
      "title": "io_uring: fix possible deadlock in io_register_iowq_max_workers()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-41080",
    "datePublished": "2024-07-29T15:04:17.642Z",
    "dateReserved": "2024-07-12T12:17:45.633Z",
    "dateUpdated": "2026-05-11T20:25:48.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-41080",
      "date": "2026-09-16",
      "epss": "0.00204",
      "percentile": "0.10665"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.9.11\", \"matchCriteriaId\": \"E5165B93-C9B7-47E9-8137-35D791A1B1D1\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nio_uring: fix possible deadlock in io_register_iowq_max_workers()\\n\\nThe io_register_iowq_max_workers() function calls io_put_sq_data(),\\nwhich acquires the sqd-\u003elock without releasing the uring_lock.\\nSimilar to the commit 009ad9f0c6ee (\\\"io_uring: drop ctx-\u003euring_lock\\nbefore acquiring sqd-\u003elock\\\"), this can lead to a potential deadlock\\nsituation.\\n\\nTo resolve this issue, the uring_lock is released before calling\\nio_put_sq_data(), and then it is re-acquired after the function call.\\n\\nThis change ensures that the locks are acquired in the correct\\norder, preventing the possibility of a deadlock.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: io_uring: soluciona posible punto muerto en io_register_iowq_max_workers() La funci\\u00f3n io_register_iowq_max_workers() llama a io_put_sq_data(), que adquiere el sqd-\u0026gt;lock sin liberar uring_lock. De manera similar a la confirmaci\\u00f3n 009ad9f0c6ee (\\\"io_uring: drop ctx-\u0026gt;uring_lock before adquiring sqd-\u0026gt;lock\\\"), esto puede conducir a una posible situaci\\u00f3n de punto muerto. Para resolver este problema, uring_lock se libera antes de llamar a io_put_sq_data() y luego se vuelve a adquirir despu\\u00e9s de la llamada a la funci\\u00f3n. Este cambio garantiza que los bloqueos se adquieran en el orden correcto, evitando la posibilidad de un punto muerto.\"}]",
      "id": "CVE-2024-41080",
      "lastModified": "2024-11-21T09:32:12.233",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-07-29T15:15:15.523",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/950ac86cff338ab56e2eaf611f4936ee34893b63\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/97ed7ff58de66c544692b3c2b988f3f594348de0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b17397a0a5c56e111f61cb5b77d162664dc00de9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/fdacd09f2ddf7a00787291f08ee48c0421e5b709\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-667\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T15:06:33.000Z",
      "cve": "CVE-2024-41080",
      "id": "msrc_CVE-2024-41080",
      "initial_release_date": "2024-07-01T07:00:00.000Z",
      "product_status:fixed": "5",
      "product_status:known_affected": "5",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "io_uring: fix possible deadlock in io_register_iowq_max_workers()",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-41080.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-41080\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-29T15:15:15.523\",\"lastModified\":\"2026-06-17T07:47:14.360\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nio_uring: fix possible deadlock in io_register_iowq_max_workers()\\n\\nThe io_register_iowq_max_workers() function calls io_put_sq_data(),\\nwhich acquires the sqd-\u003elock without releasing the uring_lock.\\nSimilar to the commit 009ad9f0c6ee (\\\"io_uring: drop ctx-\u003euring_lock\\nbefore acquiring sqd-\u003elock\\\"), this can lead to a potential deadlock\\nsituation.\\n\\nTo resolve this issue, the uring_lock is released before calling\\nio_put_sq_data(), and then it is re-acquired after the function call.\\n\\nThis change ensures that the locks are acquired in the correct\\norder, preventing the possibility of a deadlock.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: io_uring: soluciona posible punto muerto en io_register_iowq_max_workers() La funci\u00f3n io_register_iowq_max_workers() llama a io_put_sq_data(), que adquiere el sqd-\u0026gt;lock sin liberar uring_lock. De manera similar a la confirmaci\u00f3n 009ad9f0c6ee (\\\"io_uring: drop ctx-\u0026gt;uring_lock before adquiring sqd-\u0026gt;lock\\\"), esto puede conducir a una posible situaci\u00f3n de punto muerto. Para resolver este problema, uring_lock se libera antes de llamar a io_put_sq_data() y luego se vuelve a adquirir despu\u00e9s de la llamada a la funci\u00f3n. Este cambio garantiza que los bloqueos se adquieran en el orden correcto, evitando la posibilidad de un punto muerto.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"io_uring/register.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"b17397a0a5c56e111f61cb5b77d162664dc00de9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"97ed7ff58de66c544692b3c2b988f3f594348de0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"fdacd09f2ddf7a00787291f08ee48c0421e5b709\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"950ac86cff338ab56e2eaf611f4936ee34893b63\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2b188cc1bb857a9d4701ae59aa7768b5124e262e\",\"lessThan\":\"73254a297c2dd094abec7c9efee32455ae875bdf\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"io_uring/register.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.1\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.1\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.230\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.173\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.118\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.62\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.11\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:21:08.458402Z\",\"id\":\"CVE-2024-41080\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.9.11\",\"matchCriteriaId\":\"E5165B93-C9B7-47E9-8137-35D791A1B1D1\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/950ac86cff338ab56e2eaf611f4936ee34893b63\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/97ed7ff58de66c544692b3c2b988f3f594348de0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b17397a0a5c56e111f61cb5b77d162664dc00de9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fdacd09f2ddf7a00787291f08ee48c0421e5b709\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T14:32:47+00:00",
      "cve": "CVE-2024-41080",
      "id": "CVE-2024-41080",
      "initial_release_date": "2024-07-29T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: io_uring: fix possible deadlock in io_register_iowq_max_workers()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-41080.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T01:51:52Z",
      "cve": "CVE-2024-41080",
      "id": "CVE-2024-41080",
      "initial_release_date": "2024-08-06T02:01:14Z",
      "product_status:known_affected": "407",
      "product_status:known_not_affected": "225",
      "product_status:recommended": "643",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-41080",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-41080.json",
      "version": "69"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T04:46:52.354Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-41080\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:21:08.458402Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:20.016Z\"}}], \"cna\": {\"title\": \"io_uring: fix possible deadlock in io_register_iowq_max_workers()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"b17397a0a5c56e111f61cb5b77d162664dc00de9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"97ed7ff58de66c544692b3c2b988f3f594348de0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"fdacd09f2ddf7a00787291f08ee48c0421e5b709\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"950ac86cff338ab56e2eaf611f4936ee34893b63\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2b188cc1bb857a9d4701ae59aa7768b5124e262e\", \"lessThan\": \"73254a297c2dd094abec7c9efee32455ae875bdf\", \"versionType\": \"git\"}], \"programFiles\": [\"io_uring/register.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.1\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.1\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.230\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.173\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.118\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.62\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"io_uring/register.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/b17397a0a5c56e111f61cb5b77d162664dc00de9\"}, {\"url\": \"https://git.kernel.org/stable/c/97ed7ff58de66c544692b3c2b988f3f594348de0\"}, {\"url\": \"https://git.kernel.org/stable/c/fdacd09f2ddf7a00787291f08ee48c0421e5b709\"}, {\"url\": \"https://git.kernel.org/stable/c/950ac86cff338ab56e2eaf611f4936ee34893b63\"}, {\"url\": \"https://git.kernel.org/stable/c/b571a367502c7ef94c688ef9c7f7d69a2ce3bcca\"}, {\"url\": \"https://git.kernel.org/stable/c/73254a297c2dd094abec7c9efee32455ae875bdf\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nio_uring: fix possible deadlock in io_register_iowq_max_workers()\\n\\nThe io_register_iowq_max_workers() function calls io_put_sq_data(),\\nwhich acquires the sqd-\u003elock without releasing the uring_lock.\\nSimilar to the commit 009ad9f0c6ee (\\\"io_uring: drop ctx-\u003euring_lock\\nbefore acquiring sqd-\u003elock\\\"), this can lead to a potential deadlock\\nsituation.\\n\\nTo resolve this issue, the uring_lock is released before calling\\nio_put_sq_data(), and then it is re-acquired after the function call.\\n\\nThis change ensures that the locks are acquired in the correct\\norder, preventing the possibility of a deadlock.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.230\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.173\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.118\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.62\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.11\", \"versionStartIncluding\": \"5.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"5.1\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T09:21:37.834Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-41080\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-04T09:21:37.834Z\", \"dateReserved\": \"2024-07-12T12:17:45.633Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-29T15:04:17.642Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.