CVE-2024-35953: accel/ivpu: Fix deadlock in context_xa
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Fix deadlock in contextxa
ivpudevice->contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and interrupted by an IRQ that locks it for the second time causing the deadlock.
This deadlock was reported by lockdep and observed in internal tests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35953?
CVE-2024-35953 has been classified as a high-severity vulnerability due to the potential for deadlock in the affected kernel functionalities.
How do I fix CVE-2024-35953?
To fix CVE-2024-35953, update your Linux kernel to a version that includes the necessary fix, such as versions 5.10.223-1, 6.1.123-1, or 6.12.11-1.
What versions of the Linux kernel are affected by CVE-2024-35953?
CVE-2024-35953 affects various versions of the Linux kernel, specifically those prior to 6.9-rc3 and between certain releases like 6.3 and 6.6.28.
What are the potential consequences of CVE-2024-35953?
The potential consequences of CVE-2024-35953 include system instability and performance issues due to deadlocks during context management.
Who is affected by CVE-2024-35953?
Users of the Linux kernel versions impacted by CVE-2024-35953 are at risk, particularly those operating in environments that utilize the ivpu device driver.