Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 2213139 (CVE-2023-31084) - CVE-2023-31084 kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible
Summary: CVE-2023-31084 kernel: blocking operation in dvb_frontend_get_event and wait_...
Keywords:
Status: NEW
Alias: CVE-2023-31084
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2213140 2213141 2213142 2213143 2213144
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-06-07 08:25 UTC by Alex
Modified: 2024-03-19 17:27 UTC (History)
45 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A potential deadlock flaw was found in the Linux’s kernel DVB API (used by Digital TV devices) functionality. This flaw allows a local user to crash the system.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2023:7268 0 None None None 2023-11-15 18:24:51 UTC
Red Hat Product Errata RHBA-2023:7328 0 None None None 2023-11-16 11:39:02 UTC
Red Hat Product Errata RHBA-2023:7338 0 None None None 2023-11-16 18:04:23 UTC
Red Hat Product Errata RHBA-2023:7343 0 None None None 2023-11-20 01:58:53 UTC
Red Hat Product Errata RHBA-2023:7346 0 None None None 2023-11-20 09:25:53 UTC
Red Hat Product Errata RHSA-2023:6901 0 None None None 2023-11-14 15:15:36 UTC
Red Hat Product Errata RHSA-2023:7077 0 None None None 2023-11-14 15:20:58 UTC
Red Hat Product Errata RHSA-2024:0930 0 None None None 2024-02-21 00:27:35 UTC
Red Hat Product Errata RHSA-2024:1404 0 None None None 2024-03-19 17:27:23 UTC

Description Alex 2023-06-07 08:25:28 UTC 
A flaw in the Linux Kernel found in drivers/media/dvb-core/dvb_frontend.c. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.

Reference:
https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw@mail.gmail.com/
Comment 1 Alex 2023-06-07 08:25:54 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2213140]
Comment 6 errata-xmlrpc 2023-11-14 15:15:33 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:6901 https://access.redhat.com/errata/RHSA-2023:6901
Comment 7 errata-xmlrpc 2023-11-14 15:20:55 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7077 https://access.redhat.com/errata/RHSA-2023:7077
Comment 10 errata-xmlrpc 2024-02-21 00:27:32 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:0930 https://access.redhat.com/errata/RHSA-2024:0930
Comment 13 errata-xmlrpc 2024-03-19 17:27:20 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1404 https://access.redhat.com/errata/RHSA-2024:1404
Note You need to log in before you can comment on or make changes to this bug.