CVE-2024-27054: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27054 is a vulnerability in the Linux kernel affecting the s390/dasd (Direct Access Storage Device) driver. The issue was discovered and disclosed on May 1, 2024, and involves a double module refcount decrement bug. The vulnerability specifically affects the Linux kernel's s390 architecture subsystem (NVD, CVE).

The vulnerability occurs in the DASD driver when the discipline is associated with the device. Once this association is made, deleting the device takes care of decrementing the module's refcount. However, doing it manually on the error path causes the refcount to artificially decrease on each error when it should remain the same. The issue has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can lead to incorrect module reference counting in the Linux kernel's s390/dasd subsystem. This could potentially result in system instability or denial of service conditions on affected systems (NVD).

The vulnerability requires local access and low privileges to exploit. It primarily affects systems using the s390 architecture with DASD storage devices (NVD).

The vulnerability has been fixed in various Linux kernel versions. Ubuntu has released patches for multiple versions including 24.04 LTS (noble), 22.04 LTS (jammy), and others. The fix involves removing the manual module refcount decrement in the error path since the device deletion already handles this operation (Ubuntu).