Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-26691
HistoryApr 03, 2024 - 12:00 a.m.

CVE-2024-26691

2024-04-0300:00:00
ubuntu.com
ubuntu.com
12
linux kernel
kvm
arm64

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: KVM:
arm64: Fix circular locking dependency The rule inside kvm enforces that
the vcpu->mutex is taken inside kvm->lock. The rule is violated by the
pkvm_create_hyp_vm() which acquires the kvm->lock while already holding the
vcpu->mutex lock from kvm_vcpu_ioctl(). Avoid the circular locking
dependency altogether by protecting the hyp vm handle with the config_lock,
much like we already do for other forms of VM-scoped data.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for UB:CVE-2024-26691