CVE-2024-58042

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rhashtable: Fix potential deadlock by moving schedule_work outside lock

Move the hash table growth check and work scheduling outside the rht lock to prevent a possible circular locking dependency.

The original implementation could trigger a lockdep warning due to a potential deadlock scenario involving nested locks between rhashtable bucket, rq lock, and dsq lock. By relocating the growth check and work scheduling after releasing the rth lock, we break this potential deadlock chain.

This change expands the flexibility of rhashtable by removing restrictive locking that previously limited its use in scheduler and workqueue contexts.

Import to say that this calls rht_grow_above_75(), which reads from struct rhashtable without holding the lock, if this is a problem, we can move the check to the lock, and schedule the workqueue after the lock.

Modified so that atomic_inc is also moved outside of the bucket lock along with the growth above 75% check.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-580435.5Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2024-580445.5Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect avaCVE-2024-580454.7Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may aCVE-2024-580465.5Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confiCVE-2024-580475.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service cCVE-2024-580484.7Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availabCVE-2024-580495.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service cCVE-2024-58059.1Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit GatewCVE-2024-580505.5Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confiCVE-2024-580515.5In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Add check devm_kasprintf() returned value devm_kasprintf()CVE-2024-580525.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_CVE-2024-580535.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a