CVE-2024-35786 — Improper Locking in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 93.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
If VM_BIND is enabled on the client the legacy submission ioctl can't be
used, however if a client tries to do so regardless it will return an
error. In this case the clients mutex remained unlocked leading to a
deadlock inside nouveau_drm_postclose or any other nouveau ioctl call.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages8 packages
▶CVEListV5linux/linuxb88baab828713ce0b49b185444b2ee83bed373a8 — c288a61a48ddb77ec097e11ab81b81027cd4e197+3
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-w36h-73v6-wg8q: In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
If VM_BIND is e↗2024-05-17
OSV▶
CVE-2024-35786: In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is ena↗2024-05-17
📋Vendor Advisories
3💬Community
1Bugzilla
▶