{
  "cveId": "CVE-2024-53689",
  "url": "https://patchblox.com/security/cve/CVE-2024-53689",
  "summary": "CVE-2024-53689 is fixed in linux on 1 platform by CVE-2024-53689 (version 6.12.8-1), released January 11, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix potential deadlock while freezing que...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix potential deadlock while freezing queue and acquiring sysfs_lock\n\nFor storing a value to a queue attribute, the queue_attr_store function\nfirst freezes the queue (-\u003Eq_usage_counter(io)) and then acquire\n-\u003Esysfs_lock. This seems not correct as the usual ordering should be to\nacquire -\u003Esysfs_lock before freezing the queue. This incorrect ordering\ncauses the following lockdep splat which we are able to reproduce always\nsimply by accessing /sys/kernel/debug file using ls command:\n\n[   57.597146] WARNING: possible circular locking dependency detected\n[   57.597154] 6.12.0-10553-gb86545e02e8c #20 Tainted: G        W\n[   57.597162] ------------------------------------------------------\n[   57.597168] ls/4605 is trying to acquire lock:\n[   57.597176] c00000003eb56710 (\u0026mm-\u003Emmap_lock){\u002B\u002B\u002B\u002B}-{4:4}, at: __might_fault\u002B0x58/0xc0\n[   57.597200]\n               but task is already holding lock:\n[   57.597207] c0000018e27c6810 (\u0026sb-\u003Es_type-\u003Ei_mutex_key#3){\u002B\u002B\u002B\u002B}-{4:4}, at: iterate_dir\u002B0x94/0x1d4\n[   57.597226]\n               which lock already depends on the new lock.\n\n[   57.597233]\n               the existing dependency chain (in reverse order) is:\n[   57.597241]\n               -\u003E #5 (\u0026sb-\u003Es_type-\u003Ei_mutex_key#3){\u002B\u002B\u002B\u002B}-{4:4}:\n[   57.597255]        down_write\u002B0x6c/0x18c\n[   57.597264]        start_creating\u002B0xb4/0x24c\n[   57.597274]        debugfs_create_dir\u002B0x2c/0x1e8\n[   57.597283]        blk_register_queue\u002B0xec/0x294\n[   57.597292]        add_disk_fwnode\u002B0x2e4/0x548\n[   57.597302]        brd_alloc\u002B0x2c8/0x338\n[   57.597309]        brd_init\u002B0x100/0x178\n[   57.597317]        do_one_initcall\u002B0x88/0x3e4\n[   57.597326]        kernel_init_freeable\u002B0x3cc/0x6e0\n[   57.597334]        kernel_init\u002B0x34/0x1cc\n[   57.597342]        ret_from_kernel_user_thread\u002B0x14/0x1c\n[   57.597350]\n               -\u003E #4 (\u0026q-\u003Edebugfs_mutex){\u002B.\u002B.}-{4:4}:\n[   57.597362]        __mutex_lock\u002B0xfc/0x12a0\n[   57.597370]        blk_register_queue\u002B0xd4/0x294\n[   57.597379]        add_disk_fwnode\u002B0x2e4/0x548\n[   57.597388]        brd_alloc\u002B0x2c8/0x338\n[   57.597395]        brd_init\u002B0x100/0x178\n[   57.597402]        do_one_initcall\u002B0x88/0x3e4\n[   57.597410]        kernel_init_freeable\u002B0x3cc/0x6e0\n[   57.597418]        kernel_init\u002B0x34/0x1cc\n[   57.597426]        ret_from_kernel_user_thread\u002B0x14/0x1c\n[   57.597434]\n               -\u003E #3 (\u0026q-\u003Esysfs_lock){\u002B.\u002B.}-{4:4}:\n[   57.597446]        __mutex_lock\u002B0xfc/0x12a0\n[   57.597454]        queue_attr_store\u002B0x9c/0x110\n[   57.597462]        sysfs_kf_write\u002B0x70/0xb0\n[   57.597471]        kernfs_fop_write_iter\u002B0x1b0/0x2ac\n[   57.597480]        vfs_write\u002B0x3dc/0x6e8\n[   57.597488]        ksys_write\u002B0x84/0x140\n[   57.597495]        system_call_exception\u002B0x130/0x360\n[   57.597504]        system_call_common\u002B0x160/0x2c4\n[   57.597516]\n               -\u003E #2 (\u0026q-\u003Eq_usage_counter(io)#21){\u002B\u002B\u002B\u002B}-{0:0}:\n[   57.597530]        __submit_bio\u002B0x5ec/0x828\n[   57.597538]        submit_bio_noacct_nocheck\u002B0x1e4/0x4f0\n[   57.597547]        iomap_readahead\u002B0x2a0/0x448\n[   57.597556]        xfs_vm_readahead\u002B0x28/0x3c\n[   57.597564]        read_pages\u002B0x88/0x41c\n[   57.597571]        page_cache_ra_unbounded\u002B0x1ac/0x2d8\n[   57.597580]        filemap_get_pages\u002B0x188/0x984\n[   57.597588]        filemap_read\u002B0x13c/0x4bc\n[   57.597596]        xfs_file_buffered_read\u002B0x88/0x17c\n[   57.597605]        xfs_file_read_iter\u002B0xac/0x158\n[   57.597614]        vfs_read\u002B0x2d4/0x3b4\n[   57.597622]        ksys_read\u002B0x84/0x144\n[   57.597629]        system_call_exception\u002B0x130/0x360\n[   57.597637]        system_call_common\u002B0x160/0x2c4\n[   57.597647]\n               -\u003E #1 (mapping.invalidate_lock#2){\u002B\u002B\u002B\u002B}-{4:4}:\n[   57.597661]        down_read\u002B0x6c/0x220\n[   57.597669]        filemap_fault\u002B0x870/0x100c\n[   57.597677]        xfs_filemap_fault\u002B0xc4/0x18c\n[   57.597684]        __do_fault\u002B0x64/0x164\n[   57.597693]        __handle_mm_fault\u002B0x1274/0x1dac\n[   57.597702]        handle_mm_fault\u002B0x248/0x48\n---truncated---",
  "published": "2025-01-11T13:15:26Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.8-1",
      "fix": "CVE-2024-53689",
      "url": "https://patchblox.com/security/fix/linux/cve-2024-53689",
      "released": "2025-01-11T13:15:26Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}