CVE-2024-35953

MEDIUM5.5

accel/ivpu: Fix deadlock in context_xa

Published May 20, 2024

Modified 8 months ago

No fix available

Details

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix deadlock in context_xa

ivpu_device->context_xa is locked both in kernel thread and IRQ context. It requires XA_FLAGS_LOCK_IRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and interrupted by an IRQ that locks it for the second time causing the deadlock.

This deadlock was reported by lockdep and observed in internal tests.

References

WEBhttps://git.kernel.org/stable/c/d43e11d9c7fcb16f18bd46ab2556c2772ffc5775 WEBhttps://git.kernel.org/stable/c/e6011411147209bc0cc14628cbc155356837e52a WEBhttps://git.kernel.org/stable/c/fd7726e75968b27fe98534ccbf47ccd6fef686f3 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-35953

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMay 20, 2024

ModifiedMay 4, 2025