Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2024-42140

Description

In the Linux kernel, the following vulnerability has been resolved:riscv: kexec: Avoid deadlock in kexec crash pathIf the kexec crash code is called in the interrupt context, themachine_kexec_mask_interrupts() function will trigger a deadlock whiletrying to acquire the irqdesc spinlock and then deactivate irqchip inirq_set_irqchip_state() function.Unlike arm64, riscv only requires irq_eoi handler to complete EOI andkeeping irq_set_irqchip_state() will only leave this possible deadlockwithout any use. So we simply remove it.

POC

Reference

- https://git.kernel.org/stable/c/7692c9b6baacdee378435f58f19baf0eb69e4155

- https://git.kernel.org/stable/c/bb80a7911218bbab2a69b5db7d2545643ab0073d

Github

No PoCs found on GitHub currently.