CVE-2024-36944

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-36944
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36944.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-36944
Downstream
Related
Published
2024-05-30T15:35:42Z
Modified
2025-10-17T06:55:09.500010Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Reapply "drm/qxl: simplify qxl_fence_wait"
Details

In the Linux kernel, the following vulnerability has been resolved:

Reapply "drm/qxl: simplify qxlfencewait"

This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea.

Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got out was:

[ 93.607888] Testing event system initcall: OK [ 93.667730] Running tests on all trace events: [ 93.669757] Testing all events: OK [ 95.631064] ------------[ cut here ]------------ Timed out after 60 seconds"

and further debugging points to a possible circular locking dependency between the console_owner locking and the worker pool locking.

Reverting the commit allows Steve's VM to boot to completion again.

[ This may obviously result in the "[TTM] Buffer eviction failed" messages again, which was the reason for that original revert. But at this point this seems preferable to a non-booting system... ]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8d278fc34cdd8a44e995fa93dfd31d619a2e1fe6
Fixed
4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
84fb60063509e462e39c0e097c7d6dbb71c95967
Fixed
b548c53bc3ab83dc6fc86c8e840f013b2032267a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
42cbe04a5c77da74fb7161b0ae63f1f6e105d633
Fixed
148ed8b4d64f94ab079c8f0d88c3f444db97ba97
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
13ab5db42a593f9904acc39055ee3ae75963fc88
Fixed
3dfe35d8683daf9ba69278643efbabe40000bbf6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
07ed11afb68d94eadd4ffc082b97c2331307c5ea
Fixed
3628e0383dd349f02f882e612ab6184e4bb3dc10

Affected versions

v5.*

v5.15.156
v5.15.157
v5.15.158

v6.*

v6.1.87
v6.1.88
v6.1.89
v6.1.90
v6.6.28
v6.6.29
v6.6.30
v6.8.7
v6.8.8
v6.8.9
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3628e0383dd349f02f882e612ab6184e4bb3dc10",
        "id": "CVE-2024-36944-01a220e0",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "299343923111892373818398731149650516612",
                "52153813613753972200929519060835336187",
                "228281833470442023044711070608720563300",
                "154484115636636796311163643634134335108",
                "109083032782282596974290599017156613331",
                "93885384044362942236592193192558474664",
                "312119822931314995862915224391860684742",
                "27729216877022040324462604560209650507",
                "281015098413161845877445673409499479544",
                "160528888162117550733622390621394337618",
                "277404745024803770005627169692132290401",
                "275419564169845413142698662646699342781",
                "301840119190397812313549139126178533587",
                "58001187063370613548170455499743251032",
                "109505723470626420426559527056381249451",
                "220981906710285619497358710099903861433",
                "121815876314582109068166070308080814454",
                "119052918550003370306819028666087081317",
                "262146121004861017734956272384676956557",
                "327263957579657025394099836832293397761",
                "236878052614749464715840904205676419927",
                "54161193599836015292482630288962450975",
                "16170597128451760858585326206824075173",
                "60877790958455956788454251414111111710",
                "148001520505857969996850427150767247161",
                "50051691305585903804076563813642863176",
                "77652270298828197776894697058711539523",
                "89457813307682807832167752279761768720",
                "278596960606446992391201875192010590426",
                "128849835194117235879612705877302101280",
                "3456021599159603291589419412745370291",
                "243676586847550867329042077641058554732",
                "161844898736007503061111649278172361985",
                "116514600353339374637550452415102820400",
                "196799153399687187337089967124391569678",
                "67217522558402781870137142071091420542",
                "335048158147377943374778527301592175780"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3dfe35d8683daf9ba69278643efbabe40000bbf6",
        "id": "CVE-2024-36944-160f7a53",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "299343923111892373818398731149650516612",
                "52153813613753972200929519060835336187",
                "228281833470442023044711070608720563300",
                "154484115636636796311163643634134335108",
                "109083032782282596974290599017156613331",
                "93885384044362942236592193192558474664",
                "312119822931314995862915224391860684742",
                "27729216877022040324462604560209650507",
                "281015098413161845877445673409499479544",
                "160528888162117550733622390621394337618",
                "277404745024803770005627169692132290401",
                "275419564169845413142698662646699342781",
                "301840119190397812313549139126178533587",
                "58001187063370613548170455499743251032",
                "109505723470626420426559527056381249451",
                "220981906710285619497358710099903861433",
                "121815876314582109068166070308080814454",
                "119052918550003370306819028666087081317",
                "262146121004861017734956272384676956557",
                "327263957579657025394099836832293397761",
                "236878052614749464715840904205676419927",
                "54161193599836015292482630288962450975",
                "16170597128451760858585326206824075173",
                "60877790958455956788454251414111111710",
                "148001520505857969996850427150767247161",
                "50051691305585903804076563813642863176",
                "77652270298828197776894697058711539523",
                "89457813307682807832167752279761768720",
                "278596960606446992391201875192010590426",
                "128849835194117235879612705877302101280",
                "3456021599159603291589419412745370291",
                "243676586847550867329042077641058554732",
                "161844898736007503061111649278172361985",
                "116514600353339374637550452415102820400",
                "196799153399687187337089967124391569678",
                "67217522558402781870137142071091420542",
                "335048158147377943374778527301592175780"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3dfe35d8683daf9ba69278643efbabe40000bbf6",
        "id": "CVE-2024-36944-1cc2e652",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/linux/dma-fence.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "154569654059051008572004528004275661231",
                "259456885575539520126931809013163194658",
                "190208853896071520767018006873321811567",
                "57063071318869544153493030125849458176",
                "300666896711372055854204583772300912545",
                "226105390635550794337987478576900126171"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3628e0383dd349f02f882e612ab6184e4bb3dc10",
        "id": "CVE-2024-36944-5531c827",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/linux/dma-fence.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "154569654059051008572004528004275661231",
                "259456885575539520126931809013163194658",
                "190208853896071520767018006873321811567",
                "57063071318869544153493030125849458176",
                "300666896711372055854204583772300912545",
                "226105390635550794337987478576900126171"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b548c53bc3ab83dc6fc86c8e840f013b2032267a",
        "id": "CVE-2024-36944-86aadd6f",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "299343923111892373818398731149650516612",
                "52153813613753972200929519060835336187",
                "228281833470442023044711070608720563300",
                "154484115636636796311163643634134335108",
                "109083032782282596974290599017156613331",
                "93885384044362942236592193192558474664",
                "312119822931314995862915224391860684742",
                "27729216877022040324462604560209650507",
                "281015098413161845877445673409499479544",
                "160528888162117550733622390621394337618",
                "277404745024803770005627169692132290401",
                "275419564169845413142698662646699342781",
                "301840119190397812313549139126178533587",
                "58001187063370613548170455499743251032",
                "109505723470626420426559527056381249451",
                "220981906710285619497358710099903861433",
                "121815876314582109068166070308080814454",
                "119052918550003370306819028666087081317",
                "262146121004861017734956272384676956557",
                "327263957579657025394099836832293397761",
                "236878052614749464715840904205676419927",
                "54161193599836015292482630288962450975",
                "16170597128451760858585326206824075173",
                "60877790958455956788454251414111111710",
                "148001520505857969996850427150767247161",
                "50051691305585903804076563813642863176",
                "77652270298828197776894697058711539523",
                "89457813307682807832167752279761768720",
                "278596960606446992391201875192010590426",
                "128849835194117235879612705877302101280",
                "3456021599159603291589419412745370291",
                "243676586847550867329042077641058554732",
                "161844898736007503061111649278172361985",
                "116514600353339374637550452415102820400",
                "196799153399687187337089967124391569678",
                "67217522558402781870137142071091420542",
                "335048158147377943374778527301592175780"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b548c53bc3ab83dc6fc86c8e840f013b2032267a",
        "id": "CVE-2024-36944-892ef56b",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/linux/dma-fence.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "154569654059051008572004528004275661231",
                "259456885575539520126931809013163194658",
                "190208853896071520767018006873321811567",
                "57063071318869544153493030125849458176",
                "300666896711372055854204583772300912545",
                "226105390635550794337987478576900126171"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3dfe35d8683daf9ba69278643efbabe40000bbf6",
        "id": "CVE-2024-36944-8d1e41a7",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "qxl_fence_wait",
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "function_hash": "183293229109908634553659817821257072701",
            "length": 956.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@148ed8b4d64f94ab079c8f0d88c3f444db97ba97",
        "id": "CVE-2024-36944-a98e6360",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/linux/dma-fence.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "154569654059051008572004528004275661231",
                "259456885575539520126931809013163194658",
                "190208853896071520767018006873321811567",
                "57063071318869544153493030125849458176",
                "300666896711372055854204583772300912545",
                "226105390635550794337987478576900126171"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea",
        "id": "CVE-2024-36944-aceba846",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "qxl_fence_wait",
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "function_hash": "183293229109908634553659817821257072701",
            "length": 956.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea",
        "id": "CVE-2024-36944-bbeafa01",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "299343923111892373818398731149650516612",
                "52153813613753972200929519060835336187",
                "228281833470442023044711070608720563300",
                "154484115636636796311163643634134335108",
                "109083032782282596974290599017156613331",
                "93885384044362942236592193192558474664",
                "312119822931314995862915224391860684742",
                "27729216877022040324462604560209650507",
                "281015098413161845877445673409499479544",
                "160528888162117550733622390621394337618",
                "277404745024803770005627169692132290401",
                "275419564169845413142698662646699342781",
                "301840119190397812313549139126178533587",
                "58001187063370613548170455499743251032",
                "109505723470626420426559527056381249451",
                "220981906710285619497358710099903861433",
                "121815876314582109068166070308080814454",
                "119052918550003370306819028666087081317",
                "262146121004861017734956272384676956557",
                "327263957579657025394099836832293397761",
                "236878052614749464715840904205676419927",
                "54161193599836015292482630288962450975",
                "16170597128451760858585326206824075173",
                "60877790958455956788454251414111111710",
                "148001520505857969996850427150767247161",
                "50051691305585903804076563813642863176",
                "77652270298828197776894697058711539523",
                "89457813307682807832167752279761768720",
                "278596960606446992391201875192010590426",
                "128849835194117235879612705877302101280",
                "3456021599159603291589419412745370291",
                "243676586847550867329042077641058554732",
                "161844898736007503061111649278172361985",
                "116514600353339374637550452415102820400",
                "196799153399687187337089967124391569678",
                "67217522558402781870137142071091420542",
                "335048158147377943374778527301592175780"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3628e0383dd349f02f882e612ab6184e4bb3dc10",
        "id": "CVE-2024-36944-cb16d563",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "qxl_fence_wait",
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "function_hash": "183293229109908634553659817821257072701",
            "length": 956.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@148ed8b4d64f94ab079c8f0d88c3f444db97ba97",
        "id": "CVE-2024-36944-d339f4bc",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "qxl_fence_wait",
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "function_hash": "183293229109908634553659817821257072701",
            "length": 956.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b548c53bc3ab83dc6fc86c8e840f013b2032267a",
        "id": "CVE-2024-36944-d8cda49f",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "qxl_fence_wait",
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "function_hash": "183293229109908634553659817821257072701",
            "length": 956.0
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@148ed8b4d64f94ab079c8f0d88c3f444db97ba97",
        "id": "CVE-2024-36944-ea0e8b04",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/qxl/qxl_release.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "299343923111892373818398731149650516612",
                "52153813613753972200929519060835336187",
                "228281833470442023044711070608720563300",
                "154484115636636796311163643634134335108",
                "109083032782282596974290599017156613331",
                "93885384044362942236592193192558474664",
                "312119822931314995862915224391860684742",
                "27729216877022040324462604560209650507",
                "281015098413161845877445673409499479544",
                "160528888162117550733622390621394337618",
                "277404745024803770005627169692132290401",
                "275419564169845413142698662646699342781",
                "301840119190397812313549139126178533587",
                "58001187063370613548170455499743251032",
                "109505723470626420426559527056381249451",
                "220981906710285619497358710099903861433",
                "121815876314582109068166070308080814454",
                "119052918550003370306819028666087081317",
                "262146121004861017734956272384676956557",
                "327263957579657025394099836832293397761",
                "236878052614749464715840904205676419927",
                "54161193599836015292482630288962450975",
                "16170597128451760858585326206824075173",
                "60877790958455956788454251414111111710",
                "148001520505857969996850427150767247161",
                "50051691305585903804076563813642863176",
                "77652270298828197776894697058711539523",
                "89457813307682807832167752279761768720",
                "278596960606446992391201875192010590426",
                "128849835194117235879612705877302101280",
                "3456021599159603291589419412745370291",
                "243676586847550867329042077641058554732",
                "161844898736007503061111649278172361985",
                "116514600353339374637550452415102820400",
                "196799153399687187337089967124391569678",
                "67217522558402781870137142071091420542",
                "335048158147377943374778527301592175780"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea",
        "id": "CVE-2024-36944-fd072f7d",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "include/linux/dma-fence.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "51874939117465484966372762039295103422",
                "71129584601888515224007007731258834632",
                "38852825029937455938326433152927848850",
                "57063071318869544153493030125849458176",
                "300666896711372055854204583772300912545",
                "226105390635550794337987478576900126171"
            ]
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.156
Fixed
5.15.159
Type
ECOSYSTEM
Events
Introduced
6.1.87
Fixed
6.1.91
Type
ECOSYSTEM
Events
Introduced
6.6.28
Fixed
6.6.31
Type
ECOSYSTEM
Events
Introduced
6.8.7
Fixed
6.8.10