CVE-2024-36944Reapply "drm/qxl: simplify qxl_fence_wait"
- 5.5MediumCVSS base score
- 0.17%Exploitation in 30 daysEPSS · top 94% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got out was: [ 93.607888] Testing event system initcall: OK [ 93.667730] Running tests on all trace events: [ 93.669757] Testing all events: OK [ 95.631064] ------------[ cut here ]------------ Timed out after 60 seconds" and further debugging points to a possible circular locking dependency between the console_owner locking and the worker pool locking. Reverting the commit allows Steve's VM to boot to completion again. [ This may obviously result in the "[TTM] Buffer eviction failed" messages again, which was the reason for that original revert. But at this point this seems preferable to a non-booting system... ]
Timeline
ID reserved
By Linux
Published
- 24 months later
· 24 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.17% · top 94% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 8d278fc34cdd8a44e995fa93dfd31d619a2e1fe6 – < 4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea
- affected 84fb60063509e462e39c0e097c7d6dbb71c95967 – < b548c53bc3ab83dc6fc86c8e840f013b2032267a
- affected 42cbe04a5c77da74fb7161b0ae63f1f6e105d633 – < 148ed8b4d64f94ab079c8f0d88c3f444db97ba97
- affected 13ab5db42a593f9904acc39055ee3ae75963fc88 – < 3dfe35d8683daf9ba69278643efbabe40000bbf6
- affected 07ed11afb68d94eadd4ffc082b97c2331307c5ea – < 3628e0383dd349f02f882e612ab6184e4bb3dc10
- affected 5.15.156 – < 5.15.159
- affected 6.1.87 – < 6.1.91
- affected 6.6.28 – < 6.6.31
- affected 6.8.7 – < 6.8.10
References
References5
- https://git.kernel.org/stable/c/4a89ac4b0921c4ea21eb1b4cf3a469a91bacfcea (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/b548c53bc3ab83dc6fc86c8e840f013b2032267a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/148ed8b4d64f94ab079c8f0d88c3f444db97ba97 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/3dfe35d8683daf9ba69278643efbabe40000bbf6 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/3628e0383dd349f02f882e612ab6184e4bb3dc10 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-36294 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-36944)Record last updated .