Linux Kernel Deadlock Vulnerability in PCI Error Recovery on s390

Vulnerability

A deadlock vulnerability has been identified in the Linux kernel's handling of PCI error recovery on s390 systems. This issue arises because the PCI error recovery process blocks configuration accesses, leading to a hang in tasks that manage health recovery for certain devices. The deadlock can be reproduced by simultaneously executing PCI error recovery and requesting a configuration dump for the same device, which the current error recovery process does not handle properly.

Impact

The vulnerability can cause tasks to be blocked for an extended period, leading to a hung state in the system's task management. This was observed with tasks being blocked for over 122 seconds.

Reproduction

The vulnerability can be reproduced by injecting a PCI error recovery event for a specific device while simultaneously requesting a configuration dump for that same device. This can be done using the 'zpcictl --reset-fw <BDF>' command to trigger the error recovery, followed by a 'devlink health dump show pci/<BDF> reporter fw_fatal' command to request the configuration dump. The resulting deadlock can be observed in the system's task management logs.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Dec 16, 2025, 7:31 PM
Updated: Dec 16, 2025, 7:31 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.9
remediation
7.7
relevance
1.4
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.