Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-35786
HistoryMay 17, 2024 - 1:15 p.m.

CVE-2024-35786

2024-05-1713:15:58
Debian Security Bug Tracker
security-tracker.debian.org
2
linux
kernel
vulnerability
cve-2024-35786
resolved
mutex
deadlock
nouveau
ioctl
unix

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf If VM_BIND is enabled on the client the legacy submission ioctl can’t be used, however if a client tries to do so regardless it will return an error. In this case the clients mutex remained unlocked leading to a deadlock inside nouveau_drm_postclose or any other nouveau ioctl call.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%