Executive Summary

Informations
Name CVE-2024-46829 First vendor Publication 2024-09-27
Vendor Cve Last vendor Modification 2024-10-02

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

rtmutex: Drop rt_mutex::wait_lock before scheduling

rt_mutex_handle_deadlock() is called with rt_mutex::wait_lock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless scheduling loop with the lock held, which triggers the 'scheduling in atomic' warning.

Unlock rt_mutex::wait_lock in the dead lock case before issuing the warning and dropping into the schedule for ever loop.

[ tglx: Moved unlock before the WARN(), removed the pointless comment,
massaged changelog, added Fixes tag ]

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46829

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-667 Insufficient Locking

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3653

Sources (Detail)

https://git.kernel.org/stable/c/1401da1486dc1cdbef6025fd74a3977df3a3e5d0
https://git.kernel.org/stable/c/432efdbe7da5ecfcbc0c2180cfdbab1441752a38
https://git.kernel.org/stable/c/6a976e9a47e8e5b326de671811561cab12e6fb1f
https://git.kernel.org/stable/c/85f03ca98e07cd0786738b56ae73740bce0ac27f
https://git.kernel.org/stable/c/93f44655472d9cd418293d328f9d141ca234ad83
https://git.kernel.org/stable/c/a92d81c9efec9280681c27a2c0a963fd0f1338e0
https://git.kernel.org/stable/c/d33d26036a0274b472299d7dcdaa5fb34329f91b
https://git.kernel.org/stable/c/f13b5afc5c4889569d84c3011ce449f61fccfb28
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Date Informations
2025-01-08 03:05:30
  • Multiple Updates
2025-01-07 03:05:03
  • Multiple Updates
2024-12-25 03:03:40
  • Multiple Updates
2024-12-12 03:06:37
  • Multiple Updates
2024-11-23 03:03:33
  • Multiple Updates
2024-11-22 03:01:42
  • Multiple Updates
2024-11-20 03:00:01
  • Multiple Updates
2024-11-14 03:00:20
  • Multiple Updates
2024-11-09 03:00:20
  • Multiple Updates
2024-10-26 02:57:43
  • Multiple Updates
2024-10-25 02:59:35
  • Multiple Updates
2024-10-23 02:58:47
  • Multiple Updates
2024-10-02 21:27:35
  • Multiple Updates
2024-09-30 17:27:26
  • Multiple Updates
2024-09-27 17:27:23
  • First insertion