CVE-2023-52586 drm/msm/dpu: Add mutex lock in control vblank irq
A race condition in the Linux kernel's DPU driver allows concurrent vblank operations to cause instability or crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-52586?
CVE-2023-52586 is a high-severity vulnerability in Linux kernel, published on 6 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dpu: Add mutex lock in control vblank irq
Add a mutex lock to control vblank irq to synchronize vblank enable/disable operations happening from different threads to prevent race conditions while registering/unregistering the vblank irq callback.
v4: -Removed vblank_ctl_lock from dpu_encoder_virt, so it is only a parameter of dpu_encoder_phys. -Switch from atomic refcnt to a simple int counter as mutex has now been added v3: Mistakenly did not change wording in last version. It is done now. v2: Slightly changed wording of commit message
Patchwork: https://patchwork.freedesktop.org/patch/571854/
Weakness: CWE-362
Which versions are affected by CVE-2023-52586?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-52586?
Apply the vendor's patch.
Is CVE-2023-52586 being exploited?
There is no known exploitation of CVE-2023-52586 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-56806, AZL-56846, BELL-CVE-2023-52586, DEBIAN-CVE-2023-52586, GHSA-cv5f-f45r-4cqf, ROOT-OS-DEBIAN-11-CVE-2023-52586 and 3 more.