CVE Database›CVE-2024-44952

CVE-2024-44952

kernel: driver core: Fix uevent_show() vs driver detach race

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 4, 2024

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's driver core, which can lead to a Denial of Service (DoS). A race condition exists between reading device event attributes in sysfs and detaching a device driver. A local user could trigger this flaw by accessing device attributes while a driver is being unbound or unloaded, causing a circular locking deadlock that hangs the system.

Statement

This CVE has been marked as Rejected by the assigning CNA.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CWE-667 · Improper Locking