CVE-2024-40966

tty: add the option to have a tty reject a new ldisc

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tty: add the option to have a tty reject a new ldisc

... and use it to limit the virtual terminals to just N_TTY. They are

kind of special, and in particular, the "con_write()" routine violates

the "writes cannot sleep" rule that some ldiscs rely on.

This avoids the

BUG: sleeping function called from invalid context at kernel/printk/printk.c:2659

when N_GSM has been attached to a virtual console, and gsmld_write()

calls con_write() while holding a spinlock, and con_write() then tries

to get the console lock.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Published
2024-07-12T12:32Z
EPSS history
Timeline
  • 12 JUL 12:32Z
    tty: add the option to have a tty reject a new ldisc
    cvelistv5