CVE-2023-31084

Advisory lineage Upstream: 0 Downstream: 46
Modified
Published: 24 Apr 2023, 00:00
Last modified:18 Mar 2025, 19:16

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Apr 2023, 00:00
Published
Vulnerability first disclosed
18 Mar 2025, 19:16
Last Modified
Vulnerability information updated

Description

An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 1%

Techniques & Countermeasures

  • CWE-833•Deadlock

    The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

Affected Systems

  • debian•debian_linux

    10.0 | 11.0 | 12.0

  • fedoraproject•fedora

    37 | 38

  • linux•linux_kernel

    6.2

  • netapp•h410c_firmware

    na

References (9)