CVE-2024-42140
MEDIUMLinux Kernel - Deadlock via kexec Crash Path Interrupt Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machine_kexec_mask_interrupts() function will trigger a deadlock while trying to acquire the irqdesc spinlock and then deactivate irqchip in irq_set_irqchip_state() function. Unlike arm64, riscv only requires irq_eoi handler to complete EOI and keeping irq_set_irqchip_state() will only leave this possible deadlock without any use. So we simply remove it.
References (6)
Core 6
Core References
Mailing List, Patch
https://git.kernel.org/stable/c/bb80a7911218bbab2a69b5db7d2545643ab0073d
Mailing List, Patch
https://git.kernel.org/stable/c/653deee48a4682ea17a05b96fb6842795ab5943c
Mailing List, Patch
https://git.kernel.org/stable/c/7692c9b6baacdee378435f58f19baf0eb69e4155
Mailing List, Patch
https://git.kernel.org/stable/c/484dd545271d02d1571e1c6b62ea7df9dbe5e692
Mailing List, Patch
https://git.kernel.org/stable/c/c562ba719df570c986caf0941fea2449150bcbc4
Scores
CVSS v3
5.5
EPSS
0.0020
EPSS Percentile
9.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-667
Status
published
Products (20)
linux/Kernel
< 5.15.163linux
linux/Kernel
5.16.0 - 6.1.98linux
linux/Kernel
6.1.0 - 6.6.39linux
linux/Kernel
6.2.0 - 6.9.9linux
Linux/Linux
< 6.1
Linux/Linux
12f237200c169a8667cf9dca7a40df8d7917b9fd - bb80a7911218bbab2a69b5db7d2545643ab0073d
Linux/Linux
5.15.163 - 5.15.*
Linux/Linux
5.15.82 - 5.15.163
Linux/Linux
6.0.12 - 6.1
Linux/Linux
6.1
... and 10 more
Published
Jul 30, 2024
Tracked Since
Feb 18, 2026