CVE-2024-32936CWE-362

CVE-2024-32936

High · published June 24, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: ti: j721e-csi2rx: Fix races while restarting DMA

After the frame is submitted to DMA, it may happen that the submitted

list is not updated soon enough, and the DMA callback is triggered

before that.

This can lead to kernel crashes, so move everything in a single

lock/unlock section to prevent such races.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-06-24T18:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.9.46.9.4
References (4)
EPSS history
Timeline
  • 24 JUN 13:56Z
    media: ti: j721e-csi2rx: Fix races while restarting DMA
    cvelistv5