CVE-2024-43849

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-43849
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is restarted fast enough, the PDR can rewrite locator_addr fields concurrently. Protect them by placing modification of those fields under the main pdr->lock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/107924c14e3ddd85119ca43c26a4ee1056fa9b84 Patch
https://git.kernel.org/stable/c/3e815626d73e05152a8142f6e44aecc4133e6e08 Patch
https://git.kernel.org/stable/c/475a77fb3f0e1d527f56c60b79f5879661df5b80 Patch
https://git.kernel.org/stable/c/8543269567e2fb3d976a8255c5e348aed14f98bc Patch
https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c Patch
https://git.kernel.org/stable/c/eab05737ee22216250fe20d27f5a596da5ea6eb7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Oct 2024, 16:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-667
References () https://git.kernel.org/stable/c/107924c14e3ddd85119ca43c26a4ee1056fa9b84 - () https://git.kernel.org/stable/c/107924c14e3ddd85119ca43c26a4ee1056fa9b84 - Patch
References () https://git.kernel.org/stable/c/3e815626d73e05152a8142f6e44aecc4133e6e08 - () https://git.kernel.org/stable/c/3e815626d73e05152a8142f6e44aecc4133e6e08 - Patch
References () https://git.kernel.org/stable/c/475a77fb3f0e1d527f56c60b79f5879661df5b80 - () https://git.kernel.org/stable/c/475a77fb3f0e1d527f56c60b79f5879661df5b80 - Patch
References () https://git.kernel.org/stable/c/8543269567e2fb3d976a8255c5e348aed14f98bc - () https://git.kernel.org/stable/c/8543269567e2fb3d976a8255c5e348aed14f98bc - Patch
References () https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c - () https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c - Patch
References () https://git.kernel.org/stable/c/eab05737ee22216250fe20d27f5a596da5ea6eb7 - () https://git.kernel.org/stable/c/eab05737ee22216250fe20d27f5a596da5ea6eb7 - Patch

19 Aug 2024, 12:59

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: qcom: pdr: protege locator_addr con el mutex principal Si el servidor del localizador de servicios se reinicia lo suficientemente rápido, el PDR puede reescribir los campos locator_addr simultáneamente. Protéjalos colocando la modificación de esos campos bajo el pdr->lock principal.

19 Aug 2024, 05:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c -
  • () https://git.kernel.org/stable/c/eab05737ee22216250fe20d27f5a596da5ea6eb7 -

17 Aug 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-17 10:15

Updated : 2024-10-24 16:02

NVD link : CVE-2024-43849

Mitre link : CVE-2024-43849

CVE.ORG link : CVE-2024-43849

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking