CVE-2024-36944

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/05/2024
Last modified:
01/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Reapply "drm/qxl: simplify qxl_fence_wait"<br /> <br /> This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea.<br /> <br /> Stephen Rostedt reports:<br /> "I went to run my tests on my VMs and the tests hung on boot up.<br /> Unfortunately, the most I ever got out was:<br /> <br /> [ 93.607888] Testing event system initcall: OK<br /> [ 93.667730] Running tests on all trace events:<br /> [ 93.669757] Testing all events: OK<br /> [ 95.631064] ------------[ cut here ]------------<br /> Timed out after 60 seconds"<br /> <br /> and further debugging points to a possible circular locking dependency<br /> between the console_owner locking and the worker pool locking.<br /> <br /> Reverting the commit allows Steve&amp;#39;s VM to boot to completion again.<br /> <br /> [ This may obviously result in the "[TTM] Buffer eviction failed"<br /> messages again, which was the reason for that original revert. But at<br /> this point this seems preferable to a non-booting system... ]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.156 (including) 5.15.159 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1.87 (including) 6.1.91 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6.28 (including) 6.6.31 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.8.7 (including) 6.8.10 (excluding)
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*