CVE-2024-46829
MEDIUMLinux Kernel 3.2.61-3.3 - Denial of Service via rtmutex Deadlock Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rt_mutex::wait_lock before scheduling rt_mutex_handle_deadlock() is called with rt_mutex::wait_lock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless scheduling loop with the lock held, which triggers the 'scheduling in atomic' warning. Unlock rt_mutex::wait_lock in the dead lock case before issuing the warning and dropping into the schedule for ever loop. [ tglx: Moved unlock before the WARN(), removed the pointless comment, massaged changelog, added Fixes tag ]
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
8.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-667
Status
published
Products (32)
Linux/Linux
< 3.16
Linux/Linux
1201613a70dd34bd347ba2970919b3f1d5fbfb4a
Linux/Linux
2b1f3807ed9cafb59c956ce76a05d25e67103f2e
Linux/Linux
3.10.49 - 3.11
Linux/Linux
3.12.25 - 3.13
Linux/Linux
3.14.10 - 3.15
Linux/Linux
3.15.3 - 3.16
Linux/Linux
3.16
Linux/Linux
3.2.61 - 3.3
Linux/Linux
3.4.99 - 3.5
... and 22 more
Published
Sep 27, 2024
Tracked Since
Feb 18, 2026