CVE-2024-42140

Katalog CVE

CVSS 5.5 · Medium EPSS 0,20%

Kerentanan Improper Locking pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machine_kexec_mask_interrupts() function will trigger a deadlock while trying to acquire the irqdesc spinlock and then deactivate irqchip in irq_set_irqchip_state() function. Unlike arm64, riscv only requires irq_eoi handler to complete EOI and keeping irq_set_irqchip_state() will only leave this possible deadlock without any use. So we simply remove it.

Rincian

Terbit di NVD

30 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/484dd545271d02d1571e1c6b62ea7df9dbe5e692 mailing list · patch
• https://git.kernel.org/stable/c/653deee48a4682ea17a05b96fb6842795ab5943c mailing list · patch
• https://git.kernel.org/stable/c/7692c9b6baacdee378435f58f19baf0eb69e4155 mailing list · patch
• https://git.kernel.org/stable/c/bb80a7911218bbab2a69b5db7d2545643ab0073d mailing list · patch
• https://git.kernel.org/stable/c/c562ba719df570c986caf0941fea2449150bcbc4 mailing list · patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html