CVE-2024-43863 — Improper Locking in Linux
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.1OSV6.7OSV6.3OSV4.7
EPSS
0.0%
top 95.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 21
Latest updateMay 28
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix a deadlock in dma buf fence polling
Introduce a version of the fence ops that on release doesn't remove
the fence from the pending list, and thus doesn't require a lock to
fix poll->fence wait->fence unref deadlocks.
vmwgfx overwrites the wait callback to iterate over the list of all
fences and update their status, to do that it holds a lock to prevent
the list modifcations from other threads. The fence destro…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages10 packages
▶CVEListV5linux/linux2298e804e96eb3635c39519c8287befd92460303 — 9908dc0d2ef0e4aec8a242c098455729c0e2f017+6