目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

CVE-2024-35818— Linux kernel 安全漏洞

AI 预测 5.5 利用难度: 困难 EPSS 0.17% · P7

影响版本矩阵 12

厂商产品版本范围状态
LinuxLinuxfa96b57c149061f71a70bd6582d995f6424fbbf4< 97cd43ba824aec764f5ea2790d0c0a318f885167affected
fa96b57c149061f71a70bd6582d995f6424fbbf4< d7d7c6cdea875be3b241d7d39873bb431db7154daffected
fa96b57c149061f71a70bd6582d995f6424fbbf4< 0b61a7dc6712b78799b3949997e8a5e94db5c4b0affected
fa96b57c149061f71a70bd6582d995f6424fbbf4< 9adec248bba33b1503252caf8e59d81febfc5cebaffected
fa96b57c149061f71a70bd6582d995f6424fbbf4< 9c68ece8b2a5c5ff9b2fcaea923dd73efeb174cdaffected
5.19affected
< 5.19unaffected
6.1.84≤ 6.1.*unaffected
… +4 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2024-35818 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
LoongArch: Define the __io_aw() hook as mmiowb()
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Define the __io_aw() hook as mmiowb() Commit fb24ea52f78e0d595852e ("drivers: Remove explicit invocations of mmiowb()") remove all mmiowb() in drivers, but it says: "NOTE: mmiowb() has only ever guaranteed ordering in conjunction with spin_unlock(). However, pairing each mmiowb() removal in this patch with the corresponding call to spin_unlock() is not at all trivial, so there is a small chance that this change may regress any drivers incorrectly relying on mmiowb() to order MMIO writes between CPUs using lock-free synchronisation." The mmio in radeon_ring_commit() is protected by a mutex rather than a spinlock, but in the mutex fastpath it behaves similar to spinlock. We can add mmiowb() calls in the radeon driver but the maintainer says he doesn't like such a workaround, and radeon is not the only example of mutex protected mmio. So we should extend the mmiowb tracking system from spinlock to mutex, and maybe other locking primitives. This is not easy and error prone, so we solve it in the architectural code, by simply defining the __io_aw() hook as mmiowb(). And we no longer need to override queued_spin_unlock() so use the generic definition. Without this, we get such an error when run 'glxgears' on weak ordering architectures such as LoongArch: radeon 0000:04:00.0: ring 0 stalled for more than 10324msec radeon 0000:04:00.0: ring 3 stalled for more than 10240msec radeon 0000:04:00.0: GPU lockup (current fence id 0x000000000001f412 last fence id 0x000000000001f414 on ring 3) radeon 0000:04:00.0: GPU lockup (current fence id 0x000000000000f940 last fence id 0x000000000000f941 on ring 0) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35) radeon 0000:04:00.0: scheduling IB failed (-35). [drm:radeon_gem_va_ioctl [radeon]] *ERROR* Couldn't update BO_VA (-35)
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞。目前尚无此漏洞的相关信息,请随时关注CNNVD或厂商公告。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux fa96b57c149061f71a70bd6582d995f6424fbbf4 ~ 97cd43ba824aec764f5ea2790d0c0a318f885167 -
LinuxLinux 5.19 -

二、漏洞 CVE-2024-35818 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2024-35818 的情报信息

登录查看更多情报信息。

CVE-2024-35818 其他参考 (5)

同批安全公告 · Linux · 2024-05-17 · 共 135 条

CVE-2023-526879.8 CRITICALLinux kernel 安全漏洞
CVE-2024-358568.8 HIGHLinux kernel 安全漏洞
CVE-2024-358048.8 HIGHLinux kernel 安全漏洞
CVE-2024-358438.8 HIGHLinux kernel 安全漏洞
CVE-2024-358118.8 HIGHLinux kernel 安全漏洞
CVE-2024-274158.8 HIGHLinux kernel 安全漏洞
CVE-2024-274168.8 HIGHLinux kernel 安全漏洞
CVE-2024-274048.2 HIGHLinux kernel 安全漏洞
CVE-2023-526698.2 HIGHLinux kernel 安全漏洞
CVE-2024-358348.2 HIGHLinux kernel 安全漏洞
CVE-2024-357898.0 HIGHLinux kernel 安全漏洞
CVE-2024-358307.8 HIGHLinux kernel 安全漏洞
CVE-2024-358357.8 HIGHLinux kernel 安全漏洞
CVE-2024-358277.8 HIGHLinux kernel 安全漏洞
CVE-2023-526627.8 HIGHLinux kernel 安全漏洞
CVE-2024-358177.8 HIGHLinux kernel 安全漏洞
CVE-2024-358087.8 HIGHLinux kernel 安全漏洞
CVE-2024-357937.8 HIGHLinux kernel 安全漏洞
CVE-2024-357987.8 HIGHLinux kernel 安全漏洞
CVE-2024-358147.8 HIGHLinux kernel 安全漏洞

显示前 20 条,共 135 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2024-35818

暂无评论


发表评论