Vulnerability · Published Jun 24, 2024 · Assigned by Linux

CVE-2024-32936media: ti: j721e-csi2rx: Fix races while restarting DMA

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting DMA After the frame is submitted to DMA, it may happen that the submitted list is not updated soon enough, and the DMA callback is triggered before that. This can lead to kernel crashes, so move everything in a single lock/unlock section to prevent such races.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.9.7-1DEBIAN-CVE-2024-32936
Debian:14linux6.9.7-1DEBIAN-CVE-2024-32936
Ubuntu:24.04:LTSlinux6.8.0-44.44USN-6999-1
Ubuntu:24.04:LTSlinux6.8.0-44.44UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-aws6.8.0-1015.16UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-aws6.8.0-1015.16USN-6999-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1015.16~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-azure6.8.0-1014.16UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-azure6.8.0-1014.16USN-7004-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1014.16~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-gcp6.8.0-1014.16USN-6999-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1014.16UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1014.16~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-gke6.8.0-1010.13UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-gke6.8.0-1010.13USN-6999-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-45.45~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-45.45~22.04.1USN-7029-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1012.12UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-44.44.1USN-6999-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-44.44.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-44.44.1~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-44.44.1~22.04.1USN-7008-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1013.14UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1013.14USN-7005-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1013.14~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1013.14~22.04.1USN-7005-2
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1013.14.1USN-7005-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1013.14.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1012.12UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1012.12UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1012.12~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-raspi6.8.0-1011.12USN-6999-2
Ubuntu:24.04:LTSlinux-raspi6.8.0-1011.12UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-32936
Ubuntu:24.04:LTSlinux-riscv6.8.0-44.44.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-44.44.1~22.04.1UBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-32936
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-32936

Affected products (as reported)

VendorProductVersions
Linux Linux b4a3d877dc92963a4db16ddb71df3d333c0d40bd – before 80a8b92950f8ee96582dba6187e3c2deca3569eab4a3d877dc92963a4db16ddb71df3d333c0d40bd – before ad79c9ecea5baa7b4f19677e4b1c881ed89b0c3b
Linux Linux 6.7

References