CVE-2024-35991

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the use of a spinlock to protect the event log workqueue, which can lead to a Call Trace due to potential task rescheduling when drain workqueue() is called in a spinlocked context. In a multi-task scenario, calling queue work() while drain workqueue() is in progress will result in a Call Trace because pushing work onto a draining workqueue is not permitted in a spinlocked context. The solution involves converting the spinlock to a mutex, allowing drain workqueue() to be called safely in a mutex-locked context, thus preventing potential Call Trace and improving the overall robustness of the code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.