CVE-2024-46867

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 27, 2024
Updated: Oct 1, 2024
CWE ID 667

Summary

CVE-2024-46867 is a vulnerability identified in the Linux kernel. It involves a deadlock issue in the function 'show_meminfo()' within the 'drm/xe/client' module. This deadlock is caused by a sleeping in atomic() bug, where the bo put operation may lead to a real deadlock if it is the last reference and the bo destruction wants to grab the same spinlock and sleeping locks. The issue is resolved by dropping the ref using 'xe_bo_put_deferred()' and moving the final commit outside of the lock. This change is implemented in commit 0083b8e6f11d7662283a267d4ce7c966812ffd8a.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share