CVE-2023-31084

kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible

Published Apr 24, 2023 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3508-1 linux security update
Debian DLA Debian DLA DLA-3623-1 linux-5.10 security update
Debian DSA Debian DSA DSA-5448-1 linux security update
Debian DSA Debian DSA DSA-5480-1 linux security update
Ubuntu USN Ubuntu USN USN-6231-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6309-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6327-1 Linux kernel (KVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6338-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6338-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6339-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6339-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6339-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6339-4 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6340-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6340-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6342-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6342-2 Linux kernel (Azure)
Ubuntu USN Ubuntu USN USN-6344-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6349-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6350-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6351-1 Linux kernel (GKE) vulnerabilities
Ubuntu USN Ubuntu USN USN-6357-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6397-1 Linux kernel (BlueField) vulnerabilities
History
Type Values Removed Values Added
Weaknesses CWE-833
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}