What’s Vulnerable › Vulnerabilities

CVE-2024-53053: scsi: ufs: core: Fix another deadlock during RTC update

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-19 · updated 2026-06-17
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcd_rtc_work calls ufshcd_rpm_put_sync() and the pm's usage_count is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush ufshcd_rtc_work, causing a deadlock. Replace ufshcd_rpm_put_sync() with ufshcd_rpm_put() to avoid the deadlock.

Affected products

• Linux kernel: from 6.8 before 6.11.7; 6.12-rc1, 6.12-rc2, 6.12-rc3, 6.12-rc4, 6.12-rc5 — fixed in 6.11.7

How to fix

Upgrade to a fixed version: Linux kernel 6.11.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/9aa1f0da237d6b16e36e0a0cc9f746d1d78396ed
• https://git.kernel.org/stable/c/a128cfec44709ab1bd1f01d158569bcb2386f54f
• https://git.kernel.org/stable/c/cb7e509c4e0197f63717fee54fb41c4990ba8d3a

Get alerted when CVE-2024-53053 or the next vulnerability affects your stack