PT-2024-8479 · Linux+5 · Linux Kernel+5
Jacek Lawrynowicz
·
Published
2024-04-08
·
Updated
2025-03-28
·
CVE-2024-35953
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a deadlock in the context xa of the ivpu device in the Linux kernel. The deadlock occurs when the ivpu device->context xa is locked both in kernel thread and IRQ context without the XA FLAGS LOCK IRQ flag being passed during initialization. This allows the lock to be acquired from a thread and interrupted by an IRQ that locks it for the second time, causing the deadlock. The deadlock was reported by lockdep and observed in internal tests. Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu