PT-2024-8410 · Linux+5 · Linux Kernel+5
Steffen Trumtrar
+1
·
Published
2024-03-13
·
Updated
2025-03-28
·
CVE-2024-35819
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the
qbman component of the Linux kernel, where the smp call function always runs its callback in hard IRQ context, even on PREEMPT RT, where spinlocks can sleep. This requires the use of a raw spinlock for cgr lock to prevent waiting on a sleeping task. The bug was not apparent until commit ef2a8d5478b9 ("net: dpaa: Adjust queue depth on rate change") which invokes smp call function single via qman update cgr safe every time a link goes up or down.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu