CVE-2024-35806

2024-05-1714:15:14

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel" "vulnerability" "cve-2024-35806" "soc" "fsl" "qbman" "interrupts" "deadlocks" "smp_call_function_single" "irqs" "cgr_lock" "qman_update_cgr" "qman_delete_cgr" "security" "fix" "unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgr_lock smp_call_function_single disables IRQs when executing the callback. To prevent deadlocks, we must disable IRQs when taking cgr_lock elsewhere. This is already done by qman_update_cgr and qman_delete_cgr; fix the other lockers.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.85-1linux_6.1.85-1_all.deb
Debian11alllinux< 5.10.216-1linux_5.10.216-1_all.deb
Debian10alllinux<= 4.19.249-2linux_4.19.249-2_all.deb
Debian999alllinux< 6.7.12-1linux_6.7.12-1_all.deb
Debian13alllinux< 6.7.12-1linux_6.7.12-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.85-1	linux_6.1.85-1_all.deb
Debian	11	all	linux	< 5.10.216-1	linux_5.10.216-1_all.deb
Debian	10	all	linux	<= 4.19.249-2	linux_4.19.249-2_all.deb
Debian	999	all	linux	< 6.7.12-1	linux_6.7.12-1_all.deb
Debian	13	all	linux	< 6.7.12-1	linux_6.7.12-1_all.deb