What’s Vulnerable › Vulnerabilities

CVE-2024-57807: scsi: megaraid_sas: Fix for a potential deadlock

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-11 · updated 2026-06-17
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix for a potential deadlock This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock(&instance->reset_mutex); lock(&shost->scan_mutex); lock(&instance->reset_mutex); lock(&shost->scan_mutex); Fix this by temporarily releasing the reset_mutex.

Affected products

• Linux kernel: before 5.4.289; from 5.5 before 5.10.233; from 5.11 before 5.15.176; from 5.16 before 6.1.123; from 6.2 before 6.6.69; from 6.7 before 6.12.8 — fixed in 5.10.233, 5.15.176, 5.4.289, 6.1.123, 6.12.8, 6.6.69

How to fix

Upgrade to a fixed version: Linux kernel 5.10.233, 5.15.176, 5.4.289, 6.1.123. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3c654998a3e8167a58b6c6fede545fe400a4b554
• https://git.kernel.org/stable/c/466ca39dbf5d0ba71c16b15c27478a9c7d4022a8
• https://git.kernel.org/stable/c/50740f4dc78b41dec7c8e39772619d5ba841ddd7
• https://git.kernel.org/stable/c/78afb9bfad00c4aa58a424111d7edbcab9452f2b
• https://git.kernel.org/stable/c/edadc693bfcc0f1ea08b8fa041c9361fd042410d
• https://git.kernel.org/stable/c/f36d024bd15ed356a80dda3ddc46d0a62aa55815
• https://git.kernel.org/stable/c/f50783148ec98a1d38b87422e2ceaf2380b7b606
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Get alerted when CVE-2024-57807 or the next vulnerability affects your stack