Description
In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When submitting more than 2^32 padata objects to padata_do_serial, the current sorting implementation incorrectly sorts padata objects with overflowed seq_nr, causing them to be placed before existing objects in the reorder list. This leads to a deadlock in the serialization process as padata_find_next cannot match padata->seq_nr and pd->processed because the padata instance with overflowed seq_nr will be selected next. To fix this, we use an unsigned integer wrap around to correctly sort padata objects in scenarios with integer overflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 46c4079460f4dcaf445860679558eedef4e1bc91affectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 72164d5b648951684b1a593996b37a6083c61d7daffectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < ab205e1c3846326f162180e56825b4ba38ce9c30affectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 1b8cf11b3ca593a8802a51802cd0c28c38501428affectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 9e279e6c1f012b82628b89e1b9c65dbefa8ca25aaffectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 1bd712de96ad7167fe0d608e706cd60587579f16affectedbfde23ce200e6d33291d29b9b8b60cc2f30f0805 to < 9a22b2812393d93d84358a760c347c21939029a6affected
Linux Linux
Default version status: affected
5.4affected0 to < 5.4unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.54 to ≤ 6.6.*unaffected6.10.13 to ≤ 6.10.*unaffected6.11.2 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/46c4079460f4dcaf445860679558eedef4e1bc91 ↗
- https://git.kernel.org/stable/c/72164d5b648951684b1a593996b37a6083c61d7d ↗
- https://git.kernel.org/stable/c/ab205e1c3846326f162180e56825b4ba38ce9c30 ↗
- https://git.kernel.org/stable/c/1b8cf11b3ca593a8802a51802cd0c28c38501428 ↗
- https://git.kernel.org/stable/c/9e279e6c1f012b82628b89e1b9c65dbefa8ca25a ↗
- https://git.kernel.org/stable/c/1bd712de96ad7167fe0d608e706cd60587579f16 ↗
- https://git.kernel.org/stable/c/9a22b2812393d93d84358a760c347c21939029a6 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗