CVE-2024-43863Improper Locking in Linux

Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.1OSV6.7OSV6.3OSV4.7
EPSS
0.0%
top 95.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 21
Latest updateMay 28

Description

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling Introduce a version of the fence ops that on release doesn't remove the fence from the pending list, and thus doesn't require a lock to fix poll->fence wait->fence unref deadlocks. vmwgfx overwrites the wait callback to iterate over the list of all fences and update their status, to do that it holds a lock to prevent the list modifcations from other threads. The fence destro

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

NVDlinux/linux_kernel3.185.15.165+4
Debianlinux/linux_kernel< 5.10.244-1+3
Ubuntulinux/linux_kernel< 5.4.0-208.228+4
CVEListV5linux/linux2298e804e96eb3635c39519c8287befd924603039908dc0d2ef0e4aec8a242c098455729c0e2f017+6
debiandebian/linux< linux 6.1.106-1 (bookworm)

Patches

🔴Vulnerability Details

29
OSV
linux-raspi-5.4 vulnerabilities2025-05-28
OSV
linux-raspi vulnerabilities2025-05-28
OSV
linux-iot vulnerabilities2025-04-03
OSV
linux-aws-5.4 vulnerabilities2025-04-01
OSV
linux-fips vulnerabilities2025-03-28

📋Vendor Advisories

30
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities2025-05-28
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities2025-05-28
Ubuntu
Linux kernel (IoT) vulnerabilities2025-04-03
Ubuntu
Linux kernel (AWS) vulnerabilities2025-04-01
Ubuntu
Linux kernel (FIPS) vulnerabilities2025-03-28