CVE-2024-46868
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Oct 1, 2024
CWE ID 667
Summary
CVE-2024-46868 is a recently identified vulnerability in the Linux kernel. This issue lies within the qcom: uefisecapp driver and specifically affects the function qcuefi_acquire(). In the original code, a deadlock occurred when the __qcuefi pointer was not set and the lock was held onto, resulting in a problematic situation when attempting to set it later. To mitigate this issue, the lock is now dropped on the error path, in line with the expectations of all callers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX