Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-43849 Details

Description

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is restarted fast enough, the PDR can rewrite locator_addr fields concurrently. Protect them by placing modification of those fields under the main pdr->lock.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/107924c14e3ddd85119ca43c26a4ee1056fa9b84 kernel.orgPatch
https://git.kernel.org/stable/c/3e815626d73e05152a8142f6e44aecc4133e6e08 kernel.orgPatch
https://git.kernel.org/stable/c/475a77fb3f0e1d527f56c60b79f5879661df5b80 kernel.orgPatch
https://git.kernel.org/stable/c/8543269567e2fb3d976a8255c5e348aed14f98bc kernel.orgPatch
https://git.kernel.org/stable/c/d0870c4847e77a49c2f91bb2a8e0fa3c1f8dea5c kernel.orgPatch

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-667Improper Locking[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.7, < 6.1.103
>= 6.2, < 6.6.44
>= 6.7, < 6.10.3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-43849
NVD Published Date:
Aug 17, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-43849 Details - Not Deferred