5.5

CVE-2024-47143: linux Improper Locking

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-47143DEBIAN-CVE-2024-47143
Published 11-01-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-47143 is a medium (CVSS 5.5) Improper Locking vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.9% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 35 · Related 33
DLA-4075-1DLA-4076-1MGASA-2025-0030MGASA-2025-0032SUSE-SU-2025:0289-1SUSE-SU-2025:0428-1

Timeline

  1. 11-01-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radix_lock radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock(): CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock() CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd(). CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends). To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap().

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

0.00 pp

From 0.19% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu136 products
  • linuxAll versions (No fix recorded) | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < 3ccce34a5c3f5c9541108a451657ade621524b32 | ≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < efe1b9bbf356357fdff0399af361133d6e3ba18e | ≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < 8c1b4fea8d62285f5e1a8194889b39661608bd8a | ≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < c212d91070beca0d03fef7bf988baf4ff4b3eee4 | ≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < f2b95248a16c5186d1c658fc0aeb2f3bd95e5259 | ≥ 0abdd7a81b7e3fd781d7fabcca49501852bba17e, < 7543c3e3b9b88212fcd0aaf5cab5588797bdc7de | 3.14
  • linux_kernel< 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.66 | ≥ 6.7, < 6.12.5
Debian1 product
  • linux< 6.1.123-1 | < 6.12.5-1

3 vendors · 139 products

References

38 links
Show all 38 references