Vulnerability identifier: #VU92981

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-36029

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the sdhci_msm_runtime_suspend() and sdhci_msm_runtime_resume() functions in drivers/mmc/host/sdhci-msm.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
http://git.kernel.org/stable/c/1200481cd6069d16ce20133bcd86f5825e26a045
http://git.kernel.org/stable/c/a957ea5aa3d3518067a1ba32c6127322ad348d20
http://git.kernel.org/stable/c/56b99a52229d7f8cd1f53d899f57aa7eb4b199af
http://git.kernel.org/stable/c/f653b04a818c490b045c97834d559911479aa1c5
http://git.kernel.org/stable/c/f8def10f73a516b771051a2f70f2f0446902cb4f

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.