vulnerability
Ubuntu: (Multiple Advisories) (CVE-2024-38634): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
4 | (AV:L/AC:L/Au:M/C:N/I:N/A:C) | 06/21/2024 | 08/09/2024 | 02/20/2025 |
Description
In the Linux kernel, the following vulnerability has been resolved:
serial: max3100: Lock port->lock when calling uart_handle_cts_change()
uart_handle_cts_change() has to be called with port lock taken,
Since we run it in a separate work, the lock may not be taken at
the time of running. Make sure that it's taken by explicitly doing
that. Without it we got a splat:
WARNING: CPU: 0 PID: 10 at drivers/tty/serial/serial_core.c:3491 uart_handle_cts_change+0xa6/0xb0
...
Workqueue: max3100-0 max3100_work [max3100]
RIP: 0010:uart_handle_cts_change+0xa6/0xb0
...
max3100_handlerx+0xc5/0x110 [max3100]
max3100_work+0x12a/0x340 [max3100]
Solution(s)
References
- CVE-2024-38634
- https://attackerkb.com/topics/CVE-2024-38634
- UBUNTU-USN-6951-1
- UBUNTU-USN-6951-2
- UBUNTU-USN-6951-3
- UBUNTU-USN-6951-4
- UBUNTU-USN-6953-1
- UBUNTU-USN-6979-1
- UBUNTU-USN-6999-1
- UBUNTU-USN-6999-2
- UBUNTU-USN-7004-1
- UBUNTU-USN-7005-1
- UBUNTU-USN-7005-2
- UBUNTU-USN-7007-1
- UBUNTU-USN-7007-2
- UBUNTU-USN-7007-3
- UBUNTU-USN-7008-1
- UBUNTU-USN-7009-1
- UBUNTU-USN-7009-2
- UBUNTU-USN-7019-1
- UBUNTU-USN-7029-1

Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.