Deadlock Vulnerability in Linux Kernel's IVPU Device Management
Summary
DEBIAN-CVE-2024-35953: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in context_xa ivpu_device->context_xa is locked both in kernel thread and IRQ context. Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including process management, memory management, and device control. The IVPU (Intelligent Video Processing Unit) is a subsystem within the kernel that handles video processing tasks. This vulnerability affects the IVPU device management, specifically in the context of locking mechanisms that can lead to system deadlocks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the IVPU device management related to the locking of the context_xa structure. The issue arises when the ivpu_device->context_xa is locked in both kernel thread and IRQ context without the appropriate XA_FLAGS_LOCK_IRQ flag during initialization. This improper locking can lead to a deadlock situation where a thread acquires the lock and is then interrupted by an IRQ that attempts to acquire the same lock again, causing the system to hang. This vulnerability was reported by lockdep and observed during internal testing, potentially affecting system stability and performance.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The deadlock vulnerability in the Linux kernel's IVPU device management poses a significant risk to system stability. It is essential to update to the patched version to safeguard against potential exploitation. Regular monitoring using tools like Vulert can help maintain awareness of vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a deadlock issue in the Linux kernel's IVPU device management, caused by improper locking mechanisms.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can lead to system deadlocks, causing instability and performance degradation.
Yes, a patch is available in version 6.8.9-1 of the Linux package. It is recommended to update to this version or later.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
