Linux Kernel SCSI SG Driver Sleeping in Atomic Context Vulnerability

A vulnerability in the Linux kernel's SCSI SG driver has been addressed. The issue arose because the function 'sg_finish_rem_req()' calls 'blk_rq_unmap_user()', which can sleep. To resolve this, 'sg_finish_rem_req()' is now called with interrupts enabled instead of disabled, preventing potential deadlocks in atomic context.

Impact

This vulnerability could lead to a deadlock by allowing a sleeping function to be called in an atomic context, where sleeping is not permitted.

Reproduction

The vulnerability can be reproduced by invoking the 'sg_remove_sfp_usercontext()' function in the SCSI SG driver. This function processes requests in a way that can cause 'sg_finish_rem_req()' to be called with interrupts disabled, creating a risk of deadlock.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.