CVE-2024-26627: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
Vulnerability summary
CVE-2024-26627 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.4% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 17 · Related 18Timeline
- 06-03-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler Inside scsi_eh_wakeup(), scsi_host_busy() is called & checked with host lock every time for deciding if error handler kthread needs to be waken up. This can be too heavy in case of recovery, such as: - N hardware queues - queue depth is M for each hardware queue - each scsi_host_busy() iterates over (N * M) tag/requests If recovery is triggered in case that all requests are in-flight, each scsi_eh_wakeup() is strictly serialized, when scsi_eh_wakeup() is called for the last in-flight request, scsi_host_busy() has been run for (N * M - 1) times, and request has been iterated for (N*M - 1) * (N * M) times. If both N and M are big enough, hard lockup can be triggered on acquiring host lock, and it is observed on mpi3mr(128 hw queues, queue depth 8169). Fix the issue by calling scsi_host_busy() outside the host lock. We don't need the host lock for getting busy count because host the lock never covers that. [mkp: Drop unnecessary 'busy' variables pointed out by Bart]
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu104 products
- linux< 5.15.0-106.116
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1061.67
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < f5944853f7a961fedc1227dc8f60393f8936d37c | ≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < d37c1c81419fdef66ebd0747cf76fb8b7d979059 | ≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < db6338f45971b4285ea368432a84033690eaf53c | ≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < 65ead8468c21c2676d4d06f50b46beffdea69df1 | ≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < 07e3ca0f17f579491b5f54e9ed05173d6c1d6fcb | ≥ 6eb045e092efefafc6687409a6fa6d1dabf0fb69, < 4373534a9850627a2695317944898eb1283a2db0 | 5.5
- linux_kernel≥ 5.5, < 5.10.210 | ≥ 5.11, < 5.15.149 | ≥ 5.16, < 6.1.77 | ≥ 6.2, < 6.6.16 | ≥ 6.7, < 6.7.4 | 6.8:rc1 | 6.8:rc2
Debian1 product
- linux< 6.1.82-1 | < 6.7.7-1
3 vendors · 107 products
