CVE-2024-42140

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock and then...

CVE-2024-42140

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock and then...

CVE-2024-42140 riscv: kexec: Avoid deadlock in kexec crash path

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock and then...

CVE-2024-42140 riscv: kexec: Avoid deadlock in kexec crash path

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock and then...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the riscv:kexec module where the machinekexecmaskinterrupts function triggers a deadlock when attempting ...

CVE-2024-42140: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts function will trigger a deadlock while trying to acquire the irqdesc spinlock and then...

CVE-2024-38385

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...

CVE-2024-38385

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...

CVE-2024-38385 genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...

CVE-2024-38385 genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...

CVE-2024-38385 genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()

In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...

CVE-2024-38385

CVE-2024-38385 (Linux kernel) : The vulnerability is in genirq/irqdesc where irq_find_at_or_after() dereferences an interrupt descriptor returned by mt_find() without holding the sparse_irq_lock or an RCU read lock, allowing a use-after-free if the descriptor is freed after mt_find(). The proof o...

PT-2023-34578

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the genirq/irqdesc component. It was introduced in version v4.9 and fixed in version v5.10.163. The actual impact and attack plausibility have not yet been proven...

PT-2023-34280

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns the genirq/irqdesc component. It was introduced in version v4.9 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet been proven...

PT-2023-33908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns the genirq/irqdesc component, where an attempt to remove non-existing sysfs files could potentially lead to security vulnerabilities. The actual impact and attack plausibili...