CVE-2024-56752

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 29, 2024
Updated: Jan 6, 2025

Summary

CVE-2024-56752 is a vulnerability affecting the Linux kernel's drm/nouveau/gr/gf100 driver. In this driver, the function gf100_gr_chan_new() fails to unlock gr->fecs.mutex properly when the call to gf100_grctx_generate() fails. This could result in a mutex deadlock, leading to system instability or even a denial of service. The issue has been addressed with appropriate unlocking of the mutex before returning an error. Additionally, this vulnerability resolved a smatch warning associated with inconsistent returns in the gf100.c file.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share