CVE-2024-35786: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix stale locked mutex in nouveaugemioctlpushbuf
If VMBIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an error. In this case the clients mutex remained unlocked leading to a deadlock inside nouveaudrmpostclose or any other nouveau ioctl call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35786?
The severity of CVE-2024-35786 is currently classified as moderate.
How do I fix CVE-2024-35786?
To fix CVE-2024-35786, update the Linux kernel to versions above 6.8-rc6 or apply any available patches.
What versions of the Linux kernel are affected by CVE-2024-35786?
CVE-2024-35786 affects Linux kernel versions from 6.6 to 6.8-rc6.
What components are involved in CVE-2024-35786?
CVE-2024-35786 involves the DRM subsystem, specifically the nouveau driver and its handling of mutex locks.
Is CVE-2024-35786 likely to be exploited in the wild?
There is no current indication that CVE-2024-35786 is being actively exploited in the wild.