CVE-2024-26719 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between the fctx lock and the irq lock. This offloads the processing off the work from the irq into a workqueue.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redhat	Enterprise Linux

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5	cpe:/a:redhat:enterprise_linux:9	RHSA-2024:9315	2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5	cpe:/o:redhat:enterprise_linux:9	RHSA-2024:9315	2024-11-12T00:00:00Z

References

Link	Providers
https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0
https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9
https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906
https://lore.kernel.org/linux-cve-announce/2024040344-CVE-2024-26719-b66e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26719
https://www.cve.org/CVERecord?id=CVE-2024-26719

History

Wed, 13 Nov 2024 02:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T14:55:19.556Z

Updated: 2024-11-05T09:14:28.865Z

Reserved: 2024-02-19T14:20:24.161Z

Link: CVE-2024-26719

Vulnrichment

Updated: 2024-08-02T00:14:12.594Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T15:15:53.947

Modified: 2024-04-03T17:24:18.150

Link: CVE-2024-26719

Redhat

Severity : Low

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26719 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26719", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.161Z", "datePublished": "2024-04-03T14:55:19.556Z", "dateUpdated": "2024-11-05T09:14:28.865Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:28.865Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau: offload fence uevents work to workqueue\n\nThis should break the deadlock between the fctx lock and the irq lock.\n\nThis offloads the processing off the work from the irq into a workqueue."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_fence.c", "drivers/gpu/drm/nouveau/nouveau_fence.h"], "versions": [{"version": "1da177e4c3f4", "lessThan": "cc0037fa592d", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "985d053f7633", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "39126abc5e20", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/nouveau/nouveau_fence.c", "drivers/gpu/drm/nouveau/nouveau_fence.h"], "versions": [{"version": "6.6.18", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.6", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906"}, {"url": "https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9"}, {"url": "https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0"}], "title": "nouveau: offload fence uevents work to workqueue", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26719", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T18:06:27.723285Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:49:20.316Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.594Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.594Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26719", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T18:06:27.723285Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:21.739Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "nouveau: offload fence uevents work to workqueue", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "cc0037fa592d", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "985d053f7633", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "39126abc5e20", "versionType": "git"}], "programFiles": ["drivers/gpu/drm/nouveau/nouveau_fence.c", "drivers/gpu/drm/nouveau/nouveau_fence.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "6.6.18", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.6", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpu/drm/nouveau/nouveau_fence.c", "drivers/gpu/drm/nouveau/nouveau_fence.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906"}, {"url": "https://git.kernel.org/stable/c/985d053f7633d8b539ab1531738d538efac678a9"}, {"url": "https://git.kernel.org/stable/c/39126abc5e20611579602f03b66627d7cd1422f0"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau: offload fence uevents work to workqueue\n\nThis should break the deadlock between the fctx lock and the irq lock.\n\nThis offloads the processing off the work from the irq into a workqueue."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:28.865Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26719", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:14:28.865Z", "dateReserved": "2024-02-19T14:20:24.161Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T14:55:19.556Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"affected_release": [{"advisory": "RHSA-2024:9315", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-503.11.1.el9_5", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-11-12T00:00:00Z"}, {"advisory": "RHSA-2024:9315", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-503.11.1.el9_5", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-11-12T00:00:00Z"}], "bugzilla": {"description": "kernel: nouveau: offload fence uevents work to workqueue", "id": "2273143", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273143"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-833", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnouveau: offload fence uevents work to workqueue\nThis should break the deadlock between the fctx lock and the irq lock.\nThis offloads the processing off the work from the irq into a workqueue."], "name": "CVE-2024-26719", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26719\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26719\nhttps://lore.kernel.org/linux-cve-announce/2024040344-CVE-2024-26719-b66e@gregkh/T"], "threat_severity": "Low", "upstream_fix": "kernel 6.6.18, kernel 6.7.6, kernel 6.8"}