CVE-2024-26722: ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: rt5645: Fix deadlock in rt5645jackdetectwork()
There is a path in rt5645jackdetectwork(), where rt5645->jdmutex is left locked forever. That may lead to deadlock when rt5645jackdetectwork() is called for the second time.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.82-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.7-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26722?
CVE-2024-26722 is categorized as a moderate severity vulnerability due to the potential for deadlock in the Linux kernel.
How do I fix CVE-2024-26722?
To fix CVE-2024-26722, update your Linux kernel to one of the patched versions like 5.10.223-1, 6.1.123-1, or later.
Which versions of the Linux kernel are affected by CVE-2024-26722?
CVE-2024-26722 affects various versions of the Linux kernel including 4.19.306, 5.4.268, and several 6.x releases before the patches.
What is the nature of the vulnerability in CVE-2024-26722?
The vulnerability in CVE-2024-26722 is a deadlock issue in the rt5645_jack_detect_work() function of the Linux kernel.
Is there a workaround for CVE-2024-26722?
No specific workaround is recommended for CVE-2024-26722; the best practice is to apply the necessary kernel updates.