CVE-2024-50174

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50174

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race between retrieving the pointer from the XArray and incrementing the reference count. To avoid this race simply hold the internal XArray lock when incrementing the reference count, this ensures there cannot be a racing call to xa_erase().

References
Link Resource
https://git.kernel.org/stable/c/44742138d151c3a945460ae7beff8ae45ac0bf58 Patch
https://git.kernel.org/stable/c/8a585d553c11965332d7a2d74e79ef92a42bfc87 Patch
https://git.kernel.org/stable/c/cac075706f298948898b1f63e81709df42afa75d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
History

27 Nov 2024, 20:20

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-362
References () https://git.kernel.org/stable/c/44742138d151c3a945460ae7beff8ae45ac0bf58 - () https://git.kernel.org/stable/c/44742138d151c3a945460ae7beff8ae45ac0bf58 - Patch
References () https://git.kernel.org/stable/c/8a585d553c11965332d7a2d74e79ef92a42bfc87 - () https://git.kernel.org/stable/c/8a585d553c11965332d7a2d74e79ef92a42bfc87 - Patch
References () https://git.kernel.org/stable/c/cac075706f298948898b1f63e81709df42afa75d - () https://git.kernel.org/stable/c/cac075706f298948898b1f63e81709df42afa75d - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
First Time Linux
Linux linux Kernel

08 Nov 2024, 19:01

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/panthor: Se corrige la ejecución al convertir el identificador de grupo en un objeto de grupo XArray proporciona su propio bloqueo interno que protege la matriz interna cuando se agregan y eliminan entradas simultáneamente. Sin embargo, todavía hay una ejecución entre recuperar el puntero de XArray e incrementar el recuento de referencias. Para evitar esta ejecución, simplemente mantenga el bloqueo interno de XArray al incrementar el recuento de referencias, esto garantiza que no pueda haber una llamada de ejecución a xa_erase().

08 Nov 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-08 06:15

Updated : 2025-10-01 21:15

NVD link : CVE-2024-50174

Mitre link : CVE-2024-50174

CVE.ORG link : CVE-2024-50174

JSON object : View

Products Affected

linux

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')