CVE-2024-26719: nouveau: offload fence uevents work to workqueue
In the Linux kernel, the following vulnerability has been resolved:
nouveau: offload fence uevents work to workqueue
The Linux kernel CVE team has assigned CVE-2024-26719 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040344-CVE-2024-26719-b66e@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
nouveau: offload fence uevents work to workqueue
This should break the deadlock between the fctx lock and the irq lock.
This offloads the processing off the work from the irq into a workqueue.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26719?
CVE-2024-26719 is considered a vulnerability affecting the Linux kernel with a medium to high severity level.
Which Linux kernel versions are affected by CVE-2024-26719?
CVE-2024-26719 affects Linux kernel versions prior to 6.6.18, between 6.7.0 and 6.7.6, and the 6.8 release candidates.
How do I fix CVE-2024-26719?
To remediate CVE-2024-26719, upgrade the Linux kernel to version 6.6.18, 6.7.6, or 6.8.
What is the nature of the vulnerability described in CVE-2024-26719?
CVE-2024-26719 involves an issue with the nouveau subsystem in the Linux kernel, specifically related to offload fence uevents.
Is there a patch available for CVE-2024-26719?
Yes, patches addressing CVE-2024-26719 are available in the recommended kernel updates for the affected versions.