Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A deadlock vulnerability has been identified in the Linux kernel's IVPU (Intelligent Video Processing Unit) component, specifically within the job submission and abort handling processes. The issue arises from an improper locking order that allows for a deadlock scenario when a thread aborts jobs due to a fault. The thread first locks the global lock for submitted jobs, then releases the related context and file privileges. Meanwhile, the job submission thread locks the file privileges first before obtaining the submitted jobs lock, creating a conflict that can lead to a deadlock.
Exploitation of this vulnerability can cause a deadlock, where the job submission process is halted, potentially leading to a denial of service as jobs cannot be processed or submitted correctly.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.