CVE-2024-35953

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35953
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel thread and IRQ context. It requires XA_FLAGS_LOCK_IRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and interrupted by an IRQ that locks it for the second time causing the deadlock. This deadlock was reported by lockdep and observed in internal tests.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 Patch
https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a Patch
https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 Patch
https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 Patch
https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a Patch
https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
History

10 Jan 2025, 18:11

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
CWE CWE-667
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 - () https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 - Patch
References () https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a - () https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a - Patch
References () https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 - () https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 - Patch

21 Nov 2024, 09:21

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: accel/ivpu: corrige el punto muerto en context_xa ivpu_device->context_xa está bloqueado tanto en el subproceso del kernel como en el contexto IRQ. Requiere que se pase el indicador XA_FLAGS_LOCK_IRQ durante la inicialización; de lo contrario, el bloqueo podría adquirirse de un subproceso e interrumpirse mediante una IRQ que lo bloquee por segunda vez, provocando el punto muerto. Este punto muerto fue informado por lockdep y observado en pruebas internas.
References () https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 - () https://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 -
References () https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a - () https://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a -
References () https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 - () https://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 -

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2025-01-10 18:11

NVD link : CVE-2024-35953

Mitre link : CVE-2024-35953

CVE.ORG link : CVE-2024-35953

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking