CVE-2024-42140: riscv: kexec: Avoid deadlock in kexec crash path
In the Linux kernel, the following vulnerability has been resolved:
riscv: kexec: Avoid deadlock in kexec crash path
If the kexec crash code is called in the interrupt context, the machinekexecmaskinterrupts() function will trigger a deadlock while trying to acquire the irqdesc spinlock and then deactivate irqchip in irqsetirqchipstate() function.
Unlike arm64, riscv only requires irqeoi handler to complete EOI and keeping irqsetirqchipstate() will only leave this possible deadlock without any use. So we simply remove it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42140?
CVE-2024-42140 is considered a high severity vulnerability due to the potential for deadlock during kexec crash operations.
How do I fix CVE-2024-42140?
To fix CVE-2024-42140, update your Linux kernel to at least version 5.10.223-1, 5.10.226-1, 6.1.123-1, or later versions that have addressed the issue.
What systems are affected by CVE-2024-42140?
CVE-2024-42140 affects various versions of the Linux kernel, specifically those between versions 5.15.82 and 5.15.163 or 6.0.12 and 6.1.98.
What is the impact of CVE-2024-42140?
The impact of CVE-2024-42140 includes potential system unresponsive behavior due to deadlock in the kexec crash handling process.
When was CVE-2024-42140 disclosed?
CVE-2024-42140 was disclosed as part of the Linux kernel vulnerability announcements in 2024.