CVE-2023-52586CWE-362

CVE-2023-52586

High · published March 6, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dpu: Add mutex lock in control vblank irq

Add a mutex lock to control vblank irq to synchronize vblank

enable/disable operations happening from different threads to prevent

race conditions while registering/unregistering the vblank irq callback.

v4: -Removed vblank_ctl_lock from dpu_encoder_virt, so it is only a

parameter of dpu_encoder_phys.

-Switch from atomic refcnt to a simple int counter as mutex has

now been added

v3: Mistakenly did not change wording in last version. It is done now.

v2: Slightly changed wording of commit message

Patchwork: https://patchwork.freedesktop.org/patch/571854/

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-03-06T12:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.7.46.7.4
References (5)
EPSS history
Timeline
  • 06 MAR 06:45Z
    drm/msm/dpu: Add mutex lock in control vblank irq
    cvelistv5