Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42140
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42140 riscv: kexec: Avoid deadlock in kexec crash path

2024-07-3007:46:34
Linux
github.com
2
linux kernel
vulnerability
resolved
riscv
kexec
deadlock
interrupt context
machine_kexec_mask_interrupts
irqdesc spinlock
irqchip
arm64
irq_eoi handler
irq_set_irqchip_state

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

riscv: kexec: Avoid deadlock in kexec crash path

If the kexec crash code is called in the interrupt context, the
machine_kexec_mask_interrupts() function will trigger a deadlock while
trying to acquire the irqdesc spinlock and then deactivate irqchip in
irq_set_irqchip_state() function.

Unlike arm64, riscv only requires irq_eoi handler to complete EOI and
keeping irq_set_irqchip_state() will only leave this possible deadlock
without any use. So we simply remove it.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial