CVE-2024-46868: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: uefisecapp: Fix deadlock in qcuefiacquire()
If the qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it would cause a deadlock. Drop the lock on the error path. That's what all the callers are expecting.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46868?
CVE-2024-46868 has a medium severity level due to potential deadlock issues in the Linux kernel.
How do I fix CVE-2024-46868?
To fix CVE-2024-46868, update to the latest kernel versions or package releases that include the fix.
Which Linux kernel versions are affected by CVE-2024-46868?
CVE-2024-46868 affects Linux kernel versions 6.7 up to 6.10.11 and 6.11 release candidates.
Is CVE-2024-46868 a remote vulnerability?
No, CVE-2024-46868 is not a remote vulnerability, it is related to internal locking mechanisms in the kernel.
What types of systems are impacted by CVE-2024-46868?
CVE-2024-46868 impacts systems running specific versions of the Linux kernel, primarily in environments utilizing affected kernel features.