CVE-2024-56752

drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()

Published Dec 29, 2024 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()

When the call to gf100_grctx_generate() fails, unlock gr->fecs.mutex
before returning the error.

Fixes smatch warning:

drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns '&gr->fecs.mutex'.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`ca081fff6ecc63c86a99918230cc9b947bebae8a`	affected	< 237f2dbfa00576bb1aa8dc2dce403c64e53270e6
`ca081fff6ecc63c86a99918230cc9b947bebae8a`	affected	< 22b4a623c0f230540f02f4358744cce62ae12dbf
`ca081fff6ecc63c86a99918230cc9b947bebae8a`	affected	< 24b1df744ef444f9846f52de4985790a5fd1c0de
`ca081fff6ecc63c86a99918230cc9b947bebae8a`	affected	< a2f599046c671d6b46d93aed95b37241ce4504cf

Linux

affected

Version	Status	Constraints
`6.2`	affected	—
`0`	unaffected	< 6.2
`6.6.64`	unaffected	≤ 6.6.*
`6.11.11`	unaffected	≤ 6.11.*
`6.12.2`	unaffected	≤ 6.12.*
`6.13`	unaffected	≤ *

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-53395	In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() When the call to gf100_grctx_generate() fails, unlock gr->fecs.mutex before returning the error. Fixes smatch warning: drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns '&gr->fecs.mutex'.
Ubuntu USN	USN-7276-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7277-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7310-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7449-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7449-2	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-7450-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7451-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7452-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7453-1	Linux kernel (Real-time) vulnerabilities
Ubuntu USN	USN-7468-1	Linux kernel (Azure, N-Series) vulnerabilities
Ubuntu USN	USN-7523-1	Linux kernel (Raspberry Pi Real-time) vulnerabilities
Ubuntu USN	USN-7524-1	Linux kernel (Raspberry Pi) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.207% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://git.kernel.org/stable/c/22b4a623c0f230540f02f4358744cce62ae12dbf
https://git.kernel.org/stable/c/237f2dbfa00576bb1aa8dc2dce403c64e53270e6
https://git.kernel.org/stable/c/24b1df744ef444f9846f52de4985790a5fd1c0de
https://git.kernel.org/stable/c/a2f599046c671d6b46d93aed95b37241ce4504cf
https://lore.kernel.org/linux-cve-announce/2024122927-CVE-2024-56752-09d2@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-56752
https://www.cve.org/CVERecord?id=CVE-2024-56752

History

Oct 1, 2025 8:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Feb 13, 2025 12:30 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-667

Jan 6, 2025 7:30 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Dec 30, 2024 2:00 PM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2024122927-CVE-2024-56752-09d2@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-56752 https://www.cve.org/CVERecord?id=CVE-2024-56752
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Dec 29, 2024 11:45 AM Description updated. Title updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() When the call to gf100_grctx_generate() fails, unlock gr->fecs.mutex before returning the error. Fixes smatch warning: drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns '&gr->fecs.mutex'.
Title		drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
References		https://git.kernel.org/stable/c/22b4a623c0f230540f02f4358744cce62ae12dbf https://git.kernel.org/stable/c/237f2dbfa00576bb1aa8dc2dce403c64e53270e6 https://git.kernel.org/stable/c/24b1df744ef444f9846f52de4985790a5fd1c0de https://git.kernel.org/stable/c/a2f599046c671d6b46d93aed95b37241ce4504cf