CVE-2023-52493

bus: mhi: host: Drop chan lock before queuing buffers

published February 29, 2024

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Drop chan lock before queuing buffers

Ensure read and write locks for the channel are not taken in succession by

dropping the read lock from parse_xfer_event() such that a callback given

to client can potentially queue buffers and acquire the write lock in that

process. Any queueing of buffers should be done without channel read lock

acquired as it can result in multiple locks and a soft lockup.

[mani: added fixes tag and cc'ed stable]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2024-02-29T15:52Z
EPSS history
Timeline
  • 29 FEB 15:52Z
    bus: mhi: host: Drop chan lock before queuing buffers
    cvelistv5