CVE-2024-36944

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36944
In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got out was: [ 93.607888] Testing event system initcall: OK [ 93.667730] Running tests on all trace events: [ 93.669757] Testing all events: OK [ 95.631064] ------------[ cut here ]------------ Timed out after 60 seconds" and further debugging points to a possible circular locking dependency between the console_owner locking and the worker pool locking. Reverting the commit allows Steve's VM to boot to completion again. [ This may obviously result in the "[TTM] Buffer eviction failed" messages again, which was the reason for that original revert. But at this point this seems preferable to a non-booting system... ]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 Patch
https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 Patch
https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 Patch
https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea Patch
https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a Patch
https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 Patch
https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 Patch
https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 Patch
https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea Patch
https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*
History

01 Apr 2025, 18:35

Type Values Removed Values Added
CWE CWE-667
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 - () https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 - Patch
References () https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 - () https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 - Patch
References () https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 - () https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 - Patch
References () https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea - () https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea - Patch
References () https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a - () https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 - () https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 -
References () https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 - () https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 -
References () https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 - () https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 -
References () https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea - () https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea -
References () https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a - () https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a -

06 Nov 2024, 17:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Vuelva a aplicar "drm/qxl: simplificar qxl_fence_wait" Esto revierte el commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt informa: "Fui a ejecutar mis pruebas en mis máquinas virtuales y las pruebas se colgaron al arrancar. Desafortunadamente, lo máximo que obtuve fue: [ 93.607888] Probando evento de initcall del sistema: OK [ 93.667730] Ejecutando pruebas en todos los eventos de seguimiento : [93.669757] Probando todos los eventos: OK [95.631064] ------------[ cortar aquí ]------------ Se agotó el tiempo de espera después de 60 segundos" y más puntos de depuración a una posible dependencia de bloqueo circular entre el bloqueo del propietario de la consola y el bloqueo del grupo de trabajadores. Revertir el commit permite que la máquina virtual de Steve se inicie nuevamente. [Obviamente, esto puede provocar que aparezcan nuevamente los mensajes "[TTM] Error en el desalojo del búfer", que fue el motivo de la reversión original. Pero en este punto esto parece preferible a un sistema sin arranque...]
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-04-01 18:35

NVD link : CVE-2024-36944

Mitre link : CVE-2024-36944

CVE.ORG link : CVE-2024-36944

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking