CVE-2024-27021

r8169: fix LED-related deadlock on module removal

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

r8169: fix LED-related deadlock on module removal

Binding devm_led_classdev_register() to the netdev is problematic

because on module removal we get a RTNL-related deadlock. Fix this

by avoiding the device-managed LED functions.

Note: We can safely call led_classdev_unregister() for a LED even

if registering it failed, because led_classdev_unregister() detects

this and is a no-op in this case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Published
2024-05-01T05:30Z
EPSS history
Timeline
  • 01 MAY 05:30Z
    r8169: fix LED-related deadlock on module removal
    cvelistv5