CVE-2024-38780: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
dma-buf/sw-sync: don't enable IRQ from syncprintobj()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38780?
The severity of CVE-2024-38780 is classified based on its potential impact on system stability and security, requiring evaluation by system administrators.
How do I fix CVE-2024-38780?
To fix CVE-2024-38780, upgrade the Linux kernel to one of the secure versions such as 5.10.223-1 or above, as well as other specified patched versions.
What systems are affected by CVE-2024-38780?
CVE-2024-38780 affects multiple versions of the Linux kernel, specifically versions prior to 4.14 and between 4.19.0 and 6.9.4.
Can CVE-2024-38780 be exploited remotely?
CVE-2024-38780 may allow local escalation of privileges, but it is typically not exploitable remotely without prior access.
What are the potential consequences of CVE-2024-38780 if left unpatched?
If left unpatched, CVE-2024-38780 can lead to system instability and potential unauthorized access by local users.