PT-2024-8465 · Linux+3 · Linux Kernel+3
Hans De Goede
·
Published
2022-09-09
·
Updated
2025-01-24
·
CVE-2022-48634
CVSS v3.1
5.3
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.19.0
Description
The vulnerability is related to the drm/gma500 component of the Linux kernel. It is caused by the
gma crtc page flip() function holding the event lock spinlock while calling crtc funcs->mode set base(), which takes ww mutex. This can lead to a sleeping function being called from an invalid context, resulting in a BUG warning and potential system instability. The issue is fixed by unlocking the event lock after setting gma crtc->page flip event and re-taking the lock on errors to clear gma crtc->page flip event if it is still set.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions prior to 5.19.0 are affected, so updating to 5.19.0 or later will mitigate this issue.
Note: The provided input descriptions do not mention any specific mitigation measures or workarounds for this vulnerability beyond updating the Linux kernel.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse