First published: Mon Apr 24 2023(Updated: )
A flaw in the Linux Kernel found in drivers/media/dvb-core/dvb_frontend.c. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process. Reference: <a href="https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw@mail.gmail.com/">https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw@mail.gmail.com/</a>
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | =6.2 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 | |
Fedora | =37 | |
Fedora | =38 | |
Debian | =10.0 | |
Debian | =11.0 | |
Debian | =12.0 | |
All of | ||
netapp h410c firmware | ||
netapp h410c | ||
IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
IBM Security Verify Governance, Identity Manager | <=ISVG 10.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-31084 has a medium severity level due to its potential impact on system stability.
To fix CVE-2023-31084, update the Linux Kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, or newer versions provided by your distribution.
CVE-2023-31084 affects the Linux Kernel version 6.2 and IBM Security Verify Governance, Identity Manager up to version 10.0.2.
CVE-2023-31084 impacts systems running Linux Kernel 6.2, Debian distributions, and Fedora versions 37 and 38.
Currently, there are no known workarounds for CVE-2023-31084 other than applying the available updates.