CVE-2024-50174

MEDIUM Year: 2024
CVSS v3 Score
4.7
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's own internal lock which protects the internal array when entries are being simultaneously added and removed. However there is still a race between retrieving the pointer from the XArray and incrementing the reference count. To avoid this race simply hold the internal XArray lock when incrementing the reference count, this ensures there cannot be a racing call to xa_erase().

Related Vulnerabilities

CVE-2009-4895

MEDIUM
CVSS:4.7(Medium)

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or po...

CWE-3622009

CVE-2011-3585

MEDIUM
CVSS:4.7(Medium)

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when...

CWE-3622011

CVE-2014-3611

MEDIUM
CVSS:4.7(Medium)

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash...

CWE-3622014

CVE-2014-5254

MEDIUM
CVSS:4.7(Medium)

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CWE-3622014

CVE-2014-8086

MEDIUM
CVSS:4.7(Medium)

Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a combination of a writ...

CWE-3622014

CVE-2015-1865

MEDIUM
CVSS:4.7(Medium)

fts.c in coreutils 8.4 allows local users to delete arbitrary files.

CWE-3622015