CVE-2024-36944
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/05/2024
Last modified:
01/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
Reapply "drm/qxl: simplify qxl_fence_wait"<br />
<br />
This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea.<br />
<br />
Stephen Rostedt reports:<br />
"I went to run my tests on my VMs and the tests hung on boot up.<br />
Unfortunately, the most I ever got out was:<br />
<br />
[ 93.607888] Testing event system initcall: OK<br />
[ 93.667730] Running tests on all trace events:<br />
[ 93.669757] Testing all events: OK<br />
[ 95.631064] ------------[ cut here ]------------<br />
Timed out after 60 seconds"<br />
<br />
and further debugging points to a possible circular locking dependency<br />
between the console_owner locking and the worker pool locking.<br />
<br />
Reverting the commit allows Steve&#39;s VM to boot to completion again.<br />
<br />
[ This may obviously result in the "[TTM] Buffer eviction failed"<br />
messages again, which was the reason for that original revert. But at<br />
this point this seems preferable to a non-booting system... ]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.15.156 (including) | 5.15.159 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.1.87 (including) | 6.1.91 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.6.28 (including) | 6.6.31 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8.7 (including) | 6.8.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97
- https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10
- https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6
- https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea
- https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a
- https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97
- https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10
- https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6
- https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea
- https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a



