CVE-2024-42140

MEDIUM

Linux Kernel - Deadlock via kexec Crash Path Interrupt Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machine_kexec_mask_interrupts() function will trigger a deadlock while trying to acquire the irqdesc spinlock and then deactivate irqchip in irq_set_irqchip_state() function. Unlike arm64, riscv only requires irq_eoi handler to complete EOI and keeping irq_set_irqchip_state() will only leave this possible deadlock without any use. So we simply remove it.

Scores

CVSS v3 5.5
EPSS 0.0020
EPSS Percentile 9.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-667
Status published
Products (20)
linux/Kernel < 5.15.163linux
linux/Kernel 5.16.0 - 6.1.98linux
linux/Kernel 6.1.0 - 6.6.39linux
linux/Kernel 6.2.0 - 6.9.9linux
Linux/Linux < 6.1
Linux/Linux 12f237200c169a8667cf9dca7a40df8d7917b9fd - bb80a7911218bbab2a69b5db7d2545643ab0073d
Linux/Linux 5.15.163 - 5.15.*
Linux/Linux 5.15.82 - 5.15.163
Linux/Linux 6.0.12 - 6.1
Linux/Linux 6.1
... and 10 more
Published Jul 30, 2024
Tracked Since Feb 18, 2026