cbcvebase.
CVE-2024-27000
published 2024-05-01

CVE-2024-27000: In the Linux kernel, the following vulnerability has been resolved: serial: mxs-auart: add spinlock around changing cts state The uart_handle_cts_change()…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.33%
24.8th percentile
In the Linux kernel, the following vulnerability has been resolved: serial: mxs-auart: add spinlock around changing cts state The uart_handle_cts_change() function in serial_core expects the caller to hold uport->lock. For example, I have seen the below kernel splat, when the Bluetooth driver is loaded on an i.MX28 board. [ 85.119255] ------------[ cut here ]------------ [ 85.124413] WARNING: CPU: 0 PID: 27 at /drivers/tty/serial/serial_core.c:3453 uart_handle_cts_change+0xb4/0xec [ 85.134694] Modules linked in: hci_uart bluetooth ecdh_generic ecc wlcore_sdio configfs [ 85.143314] CPU: 0 PID: 27 Comm: kworker/u3:0 Not tainted 6.6.3-00021-gd62a2f068f92 #1 [ 85.151396] Hardware name: Freescale MXS (Device Tree) [ 85.156679] Workqueue: hci0 hci_power_on [bluetooth] (...) [ 85.191765] uart_handle_cts_change from mxs_auart_irq_handle+0x380/0x3f4 [ 85.198787] mxs_auart_irq_handle from __handle_irq_event_percpu+0x88/0x210 (...)

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.90-1 (bookworm)linux 6.1.90-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
linuxlinux
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 56434e295bd446142025913bfdf1587f5e1970ad56434e295bd446142025913bfdf1587f5e1970ad
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 21535ef0ac1945080198fe3e4347ea498205c99a21535ef0ac1945080198fe3e4347ea498205c99a
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 0dc0637e6b16158af85945425821bfd0151adb370dc0637e6b16158af85945425821bfd0151adb37
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 479244d68f5d94f3903eced52b093c1e01ddb495479244d68f5d94f3903eced52b093c1e01ddb495
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 2c9b943e9924cf1269e44289bc5e60e51b0f52702c9b943e9924cf1269e44289bc5e60e51b0f5270
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 5f40fd6ca2cf0bfbc5a5c9e403dfce8ca899ba375f40fd6ca2cf0bfbc5a5c9e403dfce8ca899ba37
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 94b0e65c75f4af888ab2dd6c90f060f762924e8694b0e65c75f4af888ab2dd6c90f060f762924e86
linuxlinux>= 4d90bb147ef6b91f529a21b498ff2b5fdc6785b4 < 54c4ec5f8c471b7c1137a1f769648549c423c02654c4ec5f8c471b7c1137a1f769648549c423c026
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.216-15.10.216-1
linuxlinux_kernel>= 0 < 6.1.90-16.1.90-1
linuxlinux_kernel>= 0 < 6.8.9-16.8.9-1
linuxlinux_kernel>= 0 < 6.8.9-16.8.9-1
linuxlinux_kernel>= 0 < 5.4.0-189.2095.4.0-189.209
linuxlinux_kernel>= 0 < 5.15.0-116.1265.15.0-116.126
linuxlinux_kernel>= 0 < 6.8.0-38.386.8.0-38.38
linuxlinux_kernel>= 3.18 < 4.19.3134.19.313
linuxlinux_kernel>= 4.20 < 5.4.2755.4.275
linuxlinux_kernel>= 5.11 < 5.15.1585.15.158

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8LOW
vendor_redhat7.8HIGH
vendor_ubuntu7.0HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.