CVE-2024-38634

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38634
In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock port->lock when calling uart_handle_cts_change() uart_handle_cts_change() has to be called with port lock taken, Since we run it in a separate work, the lock may not be taken at the time of running. Make sure that it's taken by explicitly doing that. Without it we got a splat: WARNING: CPU: 0 PID: 10 at drivers/tty/serial/serial_core.c:3491 uart_handle_cts_change+0xa6/0xb0 ... Workqueue: max3100-0 max3100_work [max3100] RIP: 0010:uart_handle_cts_change+0xa6/0xb0 ... max3100_handlerx+0xc5/0x110 [max3100] max3100_work+0x12a/0x340 [max3100]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 Patch
https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 Patch
https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba Patch
https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec Patch
https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 Patch
https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 Patch
https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 Patch
https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 Patch
https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 Patch
https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 Patch
https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba Patch
https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec Patch
https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 Patch
https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 Patch
https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 Patch
https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc8:*:*:*:*:*:*
History

03 Oct 2025, 14:54

Type Values Removed Values Added
CWE CWE-667
References () https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 - () https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 - Patch
References () https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 - () https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 - Patch
References () https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba - () https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba - Patch
References () https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec - () https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec - Patch
References () https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 - () https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 - Patch
References () https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 - () https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 - Patch
References () https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 - () https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 - Patch
References () https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 - () https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.30:rc2:*:*:*:*:*:*

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 - () https://git.kernel.org/stable/c/44b38924135d2093e2ec1812969464845dd66dc9 -
References () https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 - () https://git.kernel.org/stable/c/77ab53371a2066fdf9b895246505f5ef5a4b5d47 -
References () https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba - () https://git.kernel.org/stable/c/78dbda51bb4241b88a52d71620f06231a341f9ba -
References () https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec - () https://git.kernel.org/stable/c/8296bb9e5925b6634259c5d4daee88f0cc0884ec -
References () https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 - () https://git.kernel.org/stable/c/865b30c8661924ee9145f442bf32cea549faa869 -
References () https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 - () https://git.kernel.org/stable/c/93df2fba6c7dfa9a2f08546ea9a5ca4728758458 -
References () https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 - () https://git.kernel.org/stable/c/cc121e3722a0a2c8f716ef991e5425b180a5fb94 -
References () https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 - () https://git.kernel.org/stable/c/ea9b35372b58ac2931bfc1d5bc25e839d1221e30 -

15 Jul 2024, 07:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 13:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: max3100: Bloquear puerto->bloquear al llamar a uart_handle_cts_change() uart_handle_cts_change() debe llamarse con el bloqueo de puerto tomado. Dado que lo ejecutamos en un trabajo separado, el bloqueo puede No se tomará en el momento de correr. Asegúrese de que se tome haciéndolo explícitamente. Sin él, tenemos un símbolo: ADVERTENCIA: CPU: 0 PID: 10 en drivers/tty/serial/serial_core.c:3491 uart_handle_cts_change+0xa6/0xb0 ... Workqueue: max3100-0 max3100_work [max3100] RIP: 0010:uart_handle_cts_change+ 0xa6/0xb0 ... max3100_handlerx+0xc5/0x110 [max3100] max3100_work+0x12a/0x340 [max3100]
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

21 Jun 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-21 11:15

Updated : 2025-10-03 14:54

NVD link : CVE-2024-38634

Mitre link : CVE-2024-38634

CVE.ORG link : CVE-2024-38634

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking