PT-2024-32260 · Linux+2 · Linux Kernel+2
Matthew Auld
·
Published
2024-09-11
·
Updated
2025-10-06
·
CVE-2024-46867
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A real deadlock as well as a sleeping in atomic bug has been identified in the Linux kernel, specifically in the drm/xe/client module. The issue arises when the bo put happens to be the last ref, causing bo destruction to attempt to grab the same spinlock and sleeping locks. This is resolved by dropping the ref using
xe bo put deferred() and moving the final commit outside of the lock. The process of dropping the lock around the put is complex due to the potential for the bo to go out of scope and delete itself from the list, making navigation to the next list entry challenging.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu