Orta CVSS 5.5

CVE-2024-38780: Linux Kernel: güvenlik açığı

Yayın: 21 Haziran 2024 15:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Since commit a6aa8fca4d79 ("dma-buf/sw-sync: Reduce irqsave/irqrestore from known context") by error replaced spin_unlock_irqrestore() with spin_unlock_irq() for both sync_debugfs_show() and sync_print_obj() despite sync_print_obj() is called from sync_debugfs_show(), lockdep complains inconsistent lock state warning. Use plain spin_{lock,unlock}() for sync_print_obj(), for sync_debugfs_show() is already using spin_{lock,unlock}_irq().

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,19 (yüzdelik 8)
CWE: CWE-667
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	—	4.14
linux-linux-kernel	4.19	—	4.19.316
linux-linux-kernel	5.4	—	5.4.278
linux-linux-kernel	5.10	—	5.10.219
linux-linux-kernel	5.15	—	5.15.161
linux-linux-kernel	6.1	—	6.1.93
linux-linux-kernel	6.6	—	6.6.33
linux-linux-kernel	6.9	—	6.9.4
linux-linux-kernel	6.10.0	6.10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları