Executive Summary

Informations
Name CVE-2024-42140 First vendor Publication 2024-07-30
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

riscv: kexec: Avoid deadlock in kexec crash path

If the kexec crash code is called in the interrupt context, the machine_kexec_mask_interrupts() function will trigger a deadlock while trying to acquire the irqdesc spinlock and then deactivate irqchip in irq_set_irqchip_state() function.

Unlike arm64, riscv only requires irq_eoi handler to complete EOI and keeping irq_set_irqchip_state() will only leave this possible deadlock without any use. So we simply remove it.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42140

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-667 Insufficient Locking

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3635

Sources (Detail)

https://git.kernel.org/stable/c/484dd545271d02d1571e1c6b62ea7df9dbe5e692
https://git.kernel.org/stable/c/653deee48a4682ea17a05b96fb6842795ab5943c
https://git.kernel.org/stable/c/7692c9b6baacdee378435f58f19baf0eb69e4155
https://git.kernel.org/stable/c/bb80a7911218bbab2a69b5db7d2545643ab0073d
https://git.kernel.org/stable/c/c562ba719df570c986caf0941fea2449150bcbc4
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
Date Informations
2025-01-08 03:04:07
  • Multiple Updates
2025-01-07 03:03:40
  • Multiple Updates
2024-12-25 03:02:18
  • Multiple Updates
2024-12-12 03:05:15
  • Multiple Updates
2024-11-25 09:23:18
  • Multiple Updates
2024-11-22 21:22:32
  • Multiple Updates
2024-11-21 21:22:03
  • Multiple Updates
2024-11-20 02:58:51
  • Multiple Updates
2024-11-14 02:59:10
  • Multiple Updates
2024-11-09 02:59:11
  • Multiple Updates
2024-10-26 02:56:35
  • Multiple Updates
2024-10-25 02:58:29
  • Multiple Updates
2024-10-23 02:57:42
  • Multiple Updates
2024-10-03 02:53:00
  • Multiple Updates
2024-10-02 02:51:24
  • Multiple Updates
2024-09-15 02:49:06
  • Multiple Updates
2024-09-12 02:48:39
  • Multiple Updates
2024-09-07 02:47:38
  • Multiple Updates
2024-09-06 02:46:48
  • Multiple Updates
2024-09-04 02:50:00
  • Multiple Updates
2024-08-23 21:27:46
  • Multiple Updates
2024-07-30 17:27:23
  • Multiple Updates
2024-07-30 13:27:26
  • First insertion