PT-2024-21532 · Linux+1 · Linux Kernel+1
Published
2024-03-05
·
Updated
2025-03-28
·
CVE-2024-26854
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0-rc5+
Description
The issue is related to the
ice driver in the Linux kernel, where the pf->dplls.lock mutex is initialized too late, after its first use. This can cause a warning with CONFIG DEBUG MUTEXES enabled. The problem is fixed by moving the mutex initialization to the top of ice dpll init. The "err exit" error path destroys the mutex, and it is the last thing destroyed in ice dpll deinit.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the uninitialized
dplls mutex usage. As a temporary workaround, consider disabling the ice dpll init function until a patch is available. However, this may have unintended consequences and should be approached with caution.Note: The provided information does not specify the exact version where the issue is fixed, so it is recommended to update to the latest available version of the Linux kernel.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Suse