CVE-2024-40966: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-40966 addresses a vulnerability in the Linux kernel's TTY (teletype) subsystem. The issue was discovered when it was found that the virtual console's con_write() routine violates the 'writes cannot sleep' rule that some line disciplines rely on. This vulnerability was reported by syzbot and was resolved by adding an option to have a TTY reject a new line discipline, specifically limiting virtual terminals to just N_TTY (Kernel Git).

The vulnerability manifests when N_GSM has been attached to a virtual console, and gsmld_write() calls con_write() while holding a spinlock, and con_write() then attempts to get the console lock. This results in a BUG condition with the error message 'sleeping function called from invalid context at kernel/printk/printk.c:2659'. The fix involves implementing a new TTY driver option that allows rejection of specific line disciplines, ensuring that virtual terminals only use N_TTY (Kernel Git).

When exploited, this vulnerability can lead to a system crash (denial of service) due to an invalid context sleeping function call in the kernel's TTY subsystem (NVD).

The vulnerability requires local access to the system and the ability to manipulate TTY line disciplines. It was discovered through automated testing by syzbot, indicating it could be reliably triggered under specific conditions (Kernel Git).

The issue has been patched in the Linux kernel by adding a new TTY driver option that restricts virtual terminals to only use the N_TTY line discipline. The fix has been incorporated into various Linux distributions' security updates, including Debian and Ubuntu (Ubuntu Security, Debian LTS).