{"id":"CVE-2024-42315","summary":"exfat: fix potential deadlock on __exfat_get_dentry_set","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential deadlock on __exfat_get_dentry_set\n\nWhen accessing a file with more entries than ES_MAX_ENTRY_NUM, the bh-array\nis allocated in __exfat_get_entry_set. The problem is that the bh-array is\nallocated with GFP_KERNEL. It does not make sense. In the following cases,\na deadlock for sbi-\u003es_lock between the two processes may occur.\n\n       CPU0                CPU1\n       ----                ----\n  kswapd\n   balance_pgdat\n    lock(fs_reclaim)\n                      exfat_iterate\n                       lock(&sbi-\u003es_lock)\n                       exfat_readdir\n                        exfat_get_uniname_from_ext_entry\n                         exfat_get_dentry_set\n                          __exfat_get_dentry_set\n                           kmalloc_array\n                            ...\n                            lock(fs_reclaim)\n    ...\n    evict\n     exfat_evict_inode\n      lock(&sbi-\u003es_lock)\n\nTo fix this, let's allocate bh-array with GFP_NOFS.","modified":"2026-05-07T04:17:31.201351Z","published":"2024-08-17T09:09:23.779Z","related":["SUSE-SU-2024:3190-1","SUSE-SU-2024:3194-1","SUSE-SU-2024:3195-1","SUSE-SU-2024:3209-1","SUSE-SU-2024:3383-1","SUSE-SU-2024:3483-1","SUSE-SU-2025:20044-1","SUSE-SU-2025:20047-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42315.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1d1970493c289e3f44b9ec847ed26a5dbdf56a62"},{"type":"WEB","url":"https://git.kernel.org/stable/c/632fb232b6bbf8277edcbe9ecd4b4d98ecb122eb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/89fc548767a2155231128cb98726d6d2ea1256c9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a7ac198f8dba791e3144c4da48a5a9b95773ee4b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c052f775ee6ccacd3c97e4cf41a2a657e63d4259"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cd1c7858641384191ff7033fb1fc65dfcd559c6f"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42315.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42315"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"bd3bdb9e0d656f760b11d0c638d35d7f7068144d"},{"fixed":"632fb232b6bbf8277edcbe9ecd4b4d98ecb122eb"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"92dcd7d6c6068bf4fd35a6f64d606e27d634807e"},{"fixed":"c052f775ee6ccacd3c97e4cf41a2a657e63d4259"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d8fe01ad2d8ab33aaf8f2efad9e8f1dae11c4b0c"},{"fixed":"cd1c7858641384191ff7033fb1fc65dfcd559c6f"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"a3ff29a95fde16906304455aa8c0bd84eb770258"},{"fixed":"a7ac198f8dba791e3144c4da48a5a9b95773ee4b"},{"fixed":"1d1970493c289e3f44b9ec847ed26a5dbdf56a62"},{"fixed":"89fc548767a2155231128cb98726d6d2ea1256c9"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42315.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.232"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.175"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.6.44"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.10.3"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42315.json"}}],"schema_version":"1.7.5"}