In the Linux kernel, the following vulnerability has been resolved:
media: mxl111sf: change mutex_init() location
Syzbot reported, that mxl111sf_ctrl_msg() uses uninitialized mutex. The problem was in wrong mutex_init() location.
Previous mutex_init(&state->msg_lock) call was in ->init() function, but dvb_usbv2_init() has this order of calls:
dvb_usbv2_init() dvb_usbv2_adapter_init() dvb_usbv2_adapter_frontend_init() props->frontend_attach()
props->init()
Since mxl111sf_* devices call mxl111sf_ctrl_msg() in ->frontend_attach() internally we need to initialize state->msg_lock before frontend_attach(). To achieve it, ->probe() call added to all mxl111sf_* devices, which will simply initiaize mutex.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-preemptUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade kernel-preempt-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-ibm | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub