CVE-2024-26719

EPSS 0.17%
Veröffentlicht 03.04.2024 15:15:53
Zuletzt bearbeitet 03.02.2025 16:17:03
Erkennungen
Login

nouveau: offload fence uevents work to workqueue

In the Linux kernel, the following vulnerability has been resolved:

nouveau: offload fence uevents work to workqueue

This should break the deadlock between the fctx lock and the irq lock.

This offloads the processing off the work from the irq into a workqueue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 4 VulnDex Vulnerability Enrichment 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 6.6.18

Linux ≫ Linux Kernel Version >= 6.7 < 6.7.6

Linux ≫ Linux Kernel Version 6.8 Update rc1

Linux ≫ Linux Kernel Version 6.8 Update rc2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.068

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-667 Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0

Patch

https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9

Patch

https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906

Patch

https://nvd.nist.gov/vuln/detail/CVE-2024-26719

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-26719

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-26719

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-26719