cvelistv5 - cve-2024-35812

cve-2024-35812

Vulnerability from cvelistv5

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2024-06-04T12:56:46.024Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-35812",
    "datePublished": "2024-05-17T13:23:18.177Z",
    "dateRejected": "2024-06-04T12:56:46.024Z",
    "dateReserved": "2024-05-17T12:19:12.343Z",
    "dateUpdated": "2024-06-04T12:56:46.024Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-35812\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-17T14:15:15.360\",\"lastModified\":\"2024-06-04T13:15:52.390\",\"vulnStatus\":\"Rejected\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}],\"metrics\":{},\"references\":[]}}"
  }
}

ghsa-434x-x6q8-frpr

Vulnerability from github

Published

2024-05-17 15:31

Modified

2024-05-17 15:31

Details

In the Linux kernel, the following vulnerability has been resolved:

usb: cdc-wdm: close race between read and workqueue

wdm_read() cannot race with itself. However, in service_outstanding_interrupt() it can race with the workqueue, which can be triggered by error handling.

Hence we need to make sure that the WDM_RESPONDING flag is not just only set but tested.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-35812"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-17T14:15:15Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdc-wdm: close race between read and workqueue\n\nwdm_read() cannot race with itself. However, in\nservice_outstanding_interrupt() it can race with the\nworkqueue, which can be triggered by error handling.\n\nHence we need to make sure that the WDM_RESPONDING\nflag is not just only set but tested.",
  "id": "GHSA-434x-x6q8-frpr",
  "modified": "2024-05-17T15:31:10Z",
  "published": "2024-05-17T15:31:10Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35812"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e4e47e406d74cab601b2ab21ba5e3add811e05ae"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/da3b75931bb737be74d6b4341e0080f233ed1409"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ab92e11b73b48b79f144421430891f3aa6242656"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a86e54a345139f1a7668c9f83bdc7ac6f91b6f78"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9b319f4a88094b2e020e6db6e819c808d890098d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9723602387217caa71d623ffcce314dc39e84a09"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/916cd2fcbc1e344bcabf4b2a834cdf5a0417d30c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8672ad663a22d0e4a325bb7d817b36ec412b967c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7182175f565ffffa2ba1911726c5656bfc7a1bae"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5904411219601127ffdbd2d622bb5d67f9d8d16c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3afdcc4e1a00facad210f5c5891bb2fbc026067f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/347cca11bb78b9f3c29b45a9c52e70258bd008bf"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/339f83612f3a569b194680768b22bf113c26a29d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2ff436b6399859e06539a2b9c667897d3cc85ad5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/19f955ad9437a6859a529af34e2eafd903d5e7c1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/164be0a824387301312689bb29b2be92ab2cd39d"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

wid-sec-w-2024-1188

Vulnerability from csaf_certbund

Published

2024-05-20 22:00

Modified

2024-07-24 22:00

Summary

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Angriff

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme

- Linux