Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's GPIO Xilinx driver has been addressed by converting the GPIO lock to a raw spinlock. This change was necessary because IRQ chip functions can be called in a raw spinlock context, requiring internal locking to also use raw spinlocks. The vulnerability was identified by a lockdep splat, indicating an invalid wait context issue. The problem arose when a worker thread attempted to acquire a lock while holding other locks that restricted the wait context, leading to a potential deadlock situation.
The vulnerability could lead to a deadlock by allowing a worker thread to hold multiple locks in a non-wait context, creating a conflict when trying to acquire additional locks.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.