In the Linux kernel, the following vulnerability has been resolved:
Revert "media: v4l2-ctrls: show all owned controls in log_status"
This reverts commit 9801b5b28c6929139d6fceeee8d739cc67bb2739.
This patch introduced a potential deadlock scenario:
[Wed May 8 10:02:06 2024] Possible unsafe locking scenario:
[Wed May 8 10:02:06 2024] CPU0 CPU1 [Wed May 8 10:02:06 2024] ---- ---- [Wed May 8 10:02:06 2024] lock(vividctrls:1620:(hdlvidcap)->lock); [Wed May 8 10:02:06 2024] lock(vividctrls:1608:(hdluservid)->lock); [Wed May 8 10:02:06 2024] lock(vividctrls:1620:(hdlvidcap)->lock); [Wed May 8 10:02:06 2024] lock(vividctrls:1608:(hdluser_vid)->_lock);
For now just revert.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36976.json"
}