CVE-2024-44952
kernel: driver core: Fix uevent_show() vs driver detach race
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 4, 2024
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's driver core, which can lead to a Denial of Service (DoS). A race condition exists between reading device event attributes in sysfs and detaching a device driver. A local user could trigger this flaw by accessing device attributes while a driver is being unbound or unloaded, causing a circular locking deadlock that hangs the system.
Statement
This CVE has been marked as Rejected by the assigning CNA.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CWE-667 · Improper Locking