In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is restarted fast enough, the PDR can rewrite locator_addr fields concurrently. Protect them by placing modification of those fields under the main pdr->lock.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/107924c14e3ddd85119ca43c26a4ee1056fa9b84 cve-icon cve-icon
https://git.kernel.org/stable/c/3e815626d73e05152a8142f6e44aecc4133e6e08 cve-icon cve-icon
https://git.kernel.org/stable/c/475a77fb3f0e1d527f56c60b79f5879661df5b80 cve-icon cve-icon
https://git.kernel.org/stable/c/8543269567e2fb3d976a8255c5e348aed14f98bc cve-icon cve-icon
https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c cve-icon cve-icon
https://git.kernel.org/stable/c/eab05737ee22216250fe20d27f5a596da5ea6eb7 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024081732-CVE-2024-43849-fef0@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-43849 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-43849 cve-icon
History

Thu, 24 Oct 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-667
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'}

Thu, 19 Sep 2024 23:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-413
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 19 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 19 Aug 2024 04:45:00 +0000

Type Values Removed Values Added
References

Sat, 17 Aug 2024 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is restarted fast enough, the PDR can rewrite locator_addr fields concurrently. Protect them by placing modification of those fields under the main pdr->lock.
Title soc: qcom: pdr: protect locator_addr with the main mutex
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-08-17T09:22:02.728Z

Updated: 2024-12-19T09:17:06.440Z

Reserved: 2024-08-17T09:11:59.276Z

Link: CVE-2024-43849

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:22.955Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-17T10:15:10.093

Modified: 2024-10-24T16:02:21.587

Link: CVE-2024-43849

cve-icon Redhat

Severity : Low

Publid Date: 2024-08-17T00:00:00Z

Links: CVE-2024-43849 - Bugzilla