Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Youngmin Nam

Researcher fromSamsung
#46522of 53,638
5.5Total CVSS
Vulnerabilities · 1
PT-2024-14599
5.5
2024-01-03
Linux · Linux Kernel · CVE-2023-52498
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to possible deadlocks in the core system-wide PM code of the Linux kernel. In low-memory situations, the system-wide resume core code deadlocks because `async schedule dev()` executes its argument function synchronously if it cannot allocate memory, and this function attempts to acquire a mutex that is already held. Executing the argument function synchronously from within `dpm async fn()` may also be problematic for ordering reasons. The problem is addressed by changing the code to use `async schedule dev nocall()` for scheduling the asynchronous execution of device suspend and resume functions and to directly run them synchronously if `async schedule dev nocall()` returns false. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.