CVE Database›Document archive›CVE-2024-46797

CVE-2024-46797

kernel: powerpc/qspinlock: Fix deadlock in MCS queue

Loading…

Severity

Low

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · September 18, 2024

Updated · November 21, 2025

Description

An improper locking flaw was found in the PowerPC architecture implementation of the Linux Kernel's queued spinlocks in the queued_spin_lock_slowpath() function. This issue occurs due to the interaction between CPU interrupts and the queued spinlock mechanism. When an interrupt occurs at a critical moment in the locking process, stale lock values can lead to erroneous operations, causing the system to hang. If a local attacker or an application puts the system under heavy load, a deadlock can occur when multiple CPUs are contending for locks, resulting in a denial of service condition.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-667 · Improper Locking