Junglewise Threat Intelligence

CVE-2026-53331: Linux kernel deadlock in slimbus qcom-ngd-ctrl driver

CVE-2026-53331 · Severity: info · CVSS 0 · Published 2026-07-01

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A deadlock vulnerability was identified in the Linux kernel's SLIMbus driver for Qualcomm components. This issue occurs during specific system restart or power-down events, potentially causing the system to hang or become unresponsive. A fix has been released to ensure proper synchronization without triggering this lockup.

Technical details

A circular dependency (ABBA deadlock) exists in the slimbus qcom-ngd-ctrl driver between tx_lock and ctrl->lock. During Subsystem Restart (SSR) or PD Restart (PDR) notifications, the driver acquires tx_lock before calling qcom_slim_ngd_down(), which eventually attempts to acquire ctrl->lock via slim_report_absent(). Other code paths acquire these locks in the opposite order, leading to a potential deadlock and lockdep splats. The fix removes the unnecessary tx_lock acquisition in qcom_slim_ngd_ssr_pdr_notify(), as DMA transactions are already self-contained within their own transfer functions.

Affected products

  • Linux Linux kernel a899d324863a3d15ce0eea513884e1b73a758c58 to 3d1561537237c6cc1db76155183d8bbdac2339f0

Timeline

  • 2026-07-01: disclosed
  • 2026-06-19: patched

References

Related threats