CVE-2024-38780CWE-667

CVE-2024-38780

Medium · published June 21, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dma-buf/sw-sync: don't enable IRQ from sync_print_obj()

Since commit a6aa8fca4d79 ("dma-buf/sw-sync: Reduce irqsave/irqrestore from

known context") by error replaced spin_unlock_irqrestore() with

spin_unlock_irq() for both sync_debugfs_show() and sync_print_obj() despite

sync_print_obj() is called from sync_debugfs_show(), lockdep complains

inconsistent lock state warning.

Use plain spin_{lock,unlock}() for sync_print_obj(), for

sync_debugfs_show() is already using spin_{lock,unlock}_irq().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-06-21T16:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel< 4.144.14
linux/linux_kernel≥ 4.19, < 4.19.3164.19.316
linux/linux_kernel≥ 5.4, < 5.4.2785.4.278
linux/linux_kernel≥ 5.10, < 5.10.2195.10.219
linux/linux_kernel≥ 5.15, < 5.15.1615.15.161
linux/linux_kernel≥ 6.1, < 6.1.936.1.93
linux/linux_kernel≥ 6.6, < 6.6.336.6.33
linux/linux_kernel≥ 6.9, < 6.9.46.9.4
linux/linux_kernelall versions—
References (20)
https://git.kernel.org/stable/c/165b25e3ee9333f7b04f8db43895beacb51582ed · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1ff116f68560a25656933d5a18e7619cb6773d8a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/242b30466879e6defa521573c27e12018276c33a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8a283cdfc8beeb14024387a925247b563d614e1e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9d75fab2c14a25553a1664586ed122c316bd1878 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a4ee78244445ab73af22bfc5a5fc543963b25aef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ae6fc4e6a3322f6d1c8ff59150d8469487a73dd8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b794918961516f667b0c745aebdfebbb8a98df39 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/165b25e3ee9333f7b04f8db43895beacb51582ed · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1ff116f68560a25656933d5a18e7619cb6773d8a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/242b30466879e6defa521573c27e12018276c33a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8a283cdfc8beeb14024387a925247b563d614e1e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9d75fab2c14a25553a1664586ed122c316bd1878 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a4ee78244445ab73af22bfc5a5fc543963b25aef · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ae6fc4e6a3322f6d1c8ff59150d8469487a73dd8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b794918961516f667b0c745aebdfebbb8a98df39 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 21 JUN 11:15Z
    dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
    cvelistv5