CVE-2024-26691

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-26691
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26691.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26691
Downstream
Related
Published
2024-04-03T14:54:52.518Z
Modified
2026-03-14T12:29:56.921364Z
Summary
KVM: arm64: Fix circular locking dependency
Details

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Fix circular locking dependency

The rule inside kvm enforces that the vcpu->mutex is taken inside kvm->lock. The rule is violated by the pkvmcreatehypvm() which acquires the kvm->lock while already holding the vcpu->mutex lock from kvmvcpuioctl(). Avoid the circular locking dependency altogether by protecting the hyp vm handle with the configlock, much like we already do for other forms of VM-scoped data.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26691.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6211753fdfd05af9e08f54c8d0ba3ee516034878
Fixed
3d16cebf01127f459dcfeb79ed77bd68b124c228
Fixed
3ab1c40a1e915e350d9181a4603af393141970cc
Fixed
10c02aad111df02088d1a81792a709f6a7eca6cc

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26691.json"