CVE-2024-36944— Reapply "drm/qxl: simplify qxl_fence_wait"
Affected Version Matrix 9
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 8d278fc34cdd8a44e995fa93dfd31d619a2e1fe6< 4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea | affected |
84fb60063509e462e39c0e097c7d6dbb71c95967< b548c53bc3ab83dc6fc86c8e840f013b2032267a | affected | ||
42cbe04a5c77da74fb7161b0ae63f1f6e105d633< 148ed8b4d64f94ab079c8f0d88c3f444db97ba97 | affected | ||
13ab5db42a593f9904acc39055ee3ae75963fc88< 3dfe35d8683daf9ba69278643efbabe40000bbf6 | affected | ||
07ed11afb68d94eadd4ffc082b97c2331307c5ea< 3628e0383dd349f02f882e612ab6184e4bb3dc10 | affected | ||
5.15.156< 5.15.159 | affected | ||
6.1.87< 6.1.91 | affected | ||
6.6.28< 6.6.31 | affected | ||
| … +1 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36944
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Reapply "drm/qxl: simplify qxl_fence_wait"
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got out was: [ 93.607888] Testing event system initcall: OK [ 93.667730] Running tests on all trace events: [ 93.669757] Testing all events: OK [ 95.631064] ------------[ cut here ]------------ Timed out after 60 seconds" and further debugging points to a possible circular locking dependency between the console_owner locking and the worker pool locking. Reverting the commit allows Steve's VM to boot to completion again. [ This may obviously result in the "[TTM] Buffer eviction failed" messages again, which was the reason for that original revert. But at this point this seems preferable to a non-booting system... ]
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 Reapply drm/qxl 模块存在漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36944
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36944
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-05-30 · 93 CVEs total
| CVE-2024-36925 | swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y | |
| CVE-2024-36921 | wifi: iwlwifi: mvm: guard against invalid STA ID on removal | |
| CVE-2024-36918 | bpf: Check bloom filter map value size | |
| CVE-2024-36917 | block: fix overflow in blk_ioctl_discard() | |
| CVE-2024-36914 | drm/amd/display: Skip on writeback when it's not applicable | |
| CVE-2024-36915 | nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies | |
| CVE-2024-36913 | Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails | |
| CVE-2024-36912 | Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl | |
| CVE-2024-36916 | blk-iocost: avoid out of bounds shift | |
| CVE-2024-36924 | scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() | |
| CVE-2024-36922 | wifi: iwlwifi: read txq->read_ptr under lock | |
| CVE-2024-36927 | ipv4: Fix uninit-value access in __ip_make_skb() | |
| CVE-2024-36926 | powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE | |
| CVE-2024-36928 | s390/qeth: Fix kernel panic after setting hsuid | |
| CVE-2024-36929 | net: core: reject skb_copy(_expand) for fraglist GSO skbs | |
| CVE-2024-36930 | spi: fix null pointer dereference within spi_sync | |
| CVE-2024-36932 | thermal/debugfs: Prevent use-after-free from occurring after cdev removal | |
| CVE-2024-36931 | s390/cio: Ensure the copied buf is NUL terminated | |
| CVE-2024-36933 | nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). | |
| CVE-2024-36934 | bna: ensure the copied buf is NUL terminated |
Showing top 20 of 93 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-46333
ptrace: slightly saner 'get_dumpable()' logic - CVE-2026-43490
ksmbd: validate inherited ACE SID length - CVE-2026-43489
liveupdate: luo_file: remember retrieve() status - CVE-2026-43487
ata: libata-core: Disable LPM on ST1000DM010-2EP102 - CVE-2026-43488
usb: xhci: Prevent interrupt storm on host controller error
Same vendor: Linux
- CVE-2026-46333
ptrace: slightly saner 'get_dumpable()' logic - CVE-2026-43490
ksmbd: validate inherited ACE SID length - CVE-2026-43489
liveupdate: luo_file: remember retrieve() status - CVE-2026-43487
ata: libata-core: Disable LPM on ST1000DM010-2EP102 - CVE-2026-43488
usb: xhci: Prevent interrupt storm on host controller error
V. Comments for CVE-2024-36944
No comments yet