Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

CVE-2024-41080: Linux kernel io_uring could cause system freeze

CVE-2024-41080 · published 2 years ago
Summary

The Linux kernel versions used in the listed Ubuntu releases have a coding error in the io_uring component that could cause the system to stop responding under certain workloads. The problem is fixed by changing the order in which internal locks are taken, preventing the deadlock. Update your system to the latest kernel packages from Canonical to apply the fix.

What to do
  • Update canonical linux-aws-5.15 to version 5.15.0-1080.87~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1081.90~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1077.86~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-134.145~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1074.77~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1073.79~20.04.2.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-133.143~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1075.81~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1073.77~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
  • Update canonical linux to version 5.15.0-133.144.
  • Update canonical linux-aws to version 5.15.0-1078.85.
  • Update canonical linux-aws-6.8 to version 6.8.0-1018.19~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1081.90.
  • Update canonical linux-azure-6.8 to version 6.8.0-1017.20~22.04.1.
  • Update canonical linux-azure-fde to version 5.15.0-1081.90.1.
  • Update canonical linux-gcp to version 5.15.0-1077.86.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1017.19~22.04.1.
  • Update canonical linux-gke to version 5.15.0-1075.81.
  • Update canonical linux-gkeop to version 5.15.0-1060.68.
  • Update canonical linux-hwe-6.8 to version 6.8.0-48.48~22.04.1.
  • Update canonical linux-ibm to version 5.15.0-1070.73.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1015.15~22.04.1.
  • Update canonical linux-intel-iotg to version 5.15.0-1073.79.
  • Update canonical linux-kvm to version 5.15.0-1076.81.
  • Update canonical linux-lowlatency to version 5.15.0-133.143.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-48.48.3~22.04.1.
  • Update canonical linux-nvidia to version 5.15.0-1072.73.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1017.19~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1033.33.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1021.21.
  • Update canonical linux-oracle to version 5.15.0-1075.81.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1015.15~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1072.75.
  • Update canonical linux-riscv-6.8 to version 6.8.0-48.48.1~22.04.2.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1044.48.
  • Update canonical linux-bluefield to version 5.15.0-1060.62.
  • Update canonical linux-aws-fips to version 5.15.0-1078.85+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1080.89+fips1.
  • Update canonical linux-fips to version 5.15.0-133.144+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1077.86+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1071.73.
  • Update canonical linux-realtime to version 5.15.0-1078.86.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1011.11~22.04.1.
  • Update canonical linux to version 6.8.0-48.48.
  • Update canonical linux-aws to version 6.8.0-1018.20.
  • Update canonical linux-azure to version 6.8.0-1017.20.
  • Update canonical linux-gcp to version 6.8.0-1017.19.
  • Update canonical linux-gke to version 6.8.0-1013.17.
  • Update canonical linux-gkeop to version 6.8.0-1002.4.
  • Update canonical linux-ibm to version 6.8.0-1015.15.
  • Update canonical linux-lowlatency to version 6.8.0-48.48.3.
  • Update canonical linux-nvidia to version 6.8.0-1017.19.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1017.19.1.
  • Update canonical linux-oem-6.8 to version 6.8.0-1016.16.
  • Update canonical linux-oracle to version 6.8.0-1015.16.
  • Update canonical linux-raspi to version 6.8.0-1014.16.
  • Update canonical linux-riscv to version 6.8.0-48.48.1.
  • Update canonical linux-xilinx to version 6.8.0-1009.10.
  • Update canonical linux-fips to version 6.8.0-78.78+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2013.14.
  • Update canonical linux-realtime to version 6.8.1-1011.11.
  • Update debian linux to version 6.1.119-1.
  • Update debian linux to version 6.9.11-1.
  • Update linux kernel to version 6.9.11.
  • Update linux linux_kernel to version 6.9.11 or later.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1080.87~20.04.1
Fix: upgrade to 5.15.0-1080.87~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1081.90~20.04.1
Fix: upgrade to 5.15.0-1081.90~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1077.86~20.04.1
Fix: upgrade to 5.15.0-1077.86~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-134.145~20.04.1
Fix: upgrade to 5.15.0-134.145~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1074.77~20.04.1
Fix: upgrade to 5.15.0-1074.77~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1073.79~20.04.2
Fix: upgrade to 5.15.0-1073.79~20.04.2
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-133.143~20.04.1
Fix: upgrade to 5.15.0-133.143~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1075.81~20.04.1
Fix: upgrade to 5.15.0-1075.81~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1073.77~20.04.1
Fix: upgrade to 5.15.0-1073.77~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1039.39~20.04.1
Fix: upgrade to 5.15.0-1039.39~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Showing 50 of 146. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-133.144
Fix: upgrade to 5.15.0-133.144
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1078.85
Fix: upgrade to 5.15.0-1078.85
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1018.19~22.04.1
Fix: upgrade to 6.8.0-1018.19~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1081.90
Fix: upgrade to 5.15.0-1081.90
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1017.20~22.04.1
Fix: upgrade to 6.8.0-1017.20~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1081.90.1
Fix: upgrade to 5.15.0-1081.90.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1077.86
Fix: upgrade to 5.15.0-1077.86
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1017.19~22.04.1
Fix: upgrade to 6.8.0-1017.19~22.04.1
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1075.81
Fix: upgrade to 5.15.0-1075.81
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1060.68
Fix: upgrade to 5.15.0-1060.68
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-48.48~22.04.1
Fix: upgrade to 6.8.0-48.48~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1070.73
Fix: upgrade to 5.15.0-1070.73
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1015.15~22.04.1
Fix: upgrade to 6.8.0-1015.15~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1073.79
Fix: upgrade to 5.15.0-1073.79
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1076.81
Fix: upgrade to 5.15.0-1076.81
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-133.143
Fix: upgrade to 5.15.0-133.143
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-48.48.3~22.04.1
Fix: upgrade to 6.8.0-48.48.3~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1072.73
Fix: upgrade to 5.15.0-1072.73
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1017.19~22.04.1
Fix: upgrade to 6.8.0-1017.19~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1033.33
Fix: upgrade to 5.15.0-1033.33
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1021.21
Fix: upgrade to 5.15.0-1021.21
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1075.81
Fix: upgrade to 5.15.0-1075.81
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1015.15~22.04.1
Fix: upgrade to 6.8.0-1015.15~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1072.75
Fix: upgrade to 5.15.0-1072.75
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-48.48.1~22.04.2
Fix: upgrade to 6.8.0-48.48.1~22.04.2
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1044.48
Fix: upgrade to 5.15.0-1044.48
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1060.62
Fix: upgrade to 5.15.0-1060.62
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1078.85+fips1
Fix: upgrade to 5.15.0-1078.85+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1080.89+fips1
Fix: upgrade to 5.15.0-1080.89+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-133.144+fips1
Fix: upgrade to 5.15.0-133.144+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1077.86+fips1
Fix: upgrade to 5.15.0-1077.86+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1071.73
Fix: upgrade to 5.15.0-1071.73
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1078.86
Fix: upgrade to 5.15.0-1078.86
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1011.11~22.04.1
Fix: upgrade to 6.8.1-1011.11~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-48.48
Fix: upgrade to 6.8.0-48.48
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1018.20
Fix: upgrade to 6.8.0-1018.20
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1017.20
Fix: upgrade to 6.8.0-1017.20
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1017.19
Fix: upgrade to 6.8.0-1017.19
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1013.17
Fix: upgrade to 6.8.0-1013.17
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1002.4
Fix: upgrade to 6.8.0-1002.4
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1015.15
Fix: upgrade to 6.8.0-1015.15
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-48.48.3
Fix: upgrade to 6.8.0-48.48.3
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1017.19
Fix: upgrade to 6.8.0-1017.19
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1017.19.1
Fix: upgrade to 6.8.0-1017.19.1
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1016.16
Fix: upgrade to 6.8.0-1016.16
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1015.16
Fix: upgrade to 6.8.0-1015.16
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1014.16
Fix: upgrade to 6.8.0-1014.16
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-48.48.1
Fix: upgrade to 6.8.0-48.48.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1009.10
Fix: upgrade to 6.8.0-1009.10
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-78.78+fips1
Fix: upgrade to 6.8.0-78.78+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2013.14
Fix: upgrade to 6.8.0-2013.14
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1011.11
Fix: upgrade to 6.8.1-1011.11
Debian:12 debian linux < 6.1.119-1
Fix: upgrade to 6.1.119-1
Debian:13 debian linux < 6.9.11-1
Fix: upgrade to 6.9.11-1
Debian:14 debian linux < 6.9.11-1
Fix: upgrade to 6.9.11-1
– linux linux_kernel < 6.9.11
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.7.0, < 6.9.11
Fix: upgrade to 6.9.11
Original advisory text
io_uring: fix possible deadlock in io_register_iowq_max_workers()
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix possible deadlock in io_register_iowq_max_workers() The io_register_iowq_max_workers() function calls io_put_sq_data(), which acquires the sqd->lock without releasing the uring_lock. Similar to the commit 009ad9f0c6ee ("io_uring: drop ctx->uring_lock before acquiring sqd->lock"), this can lead to a potential deadlock situation. To resolve this issue, the uring_lock is released before calling io_put_sq_data(), and then it is re-acquired after the function call. This change ensures that the locks are acquired in the correct order, preventing the possibility of a deadlock.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-667Improper Locking
Timeline
Published29 Jul 2024
Updated2 Nov 2026
First seen1 Sep 2026
Sources
CVE-2024-41080 · NVD
Track software like this
Free during beta