CVE-2024-46797 describes a deadlock vulnerability in the Linux kernel's powerpc/qspinlock implementation, specifically affecting the MCS queue mechanism. This flaw occurs when an interrupt during queued_spin_lock_slowpath() leads to stale lock values, causing a CPU to incorrectly update a qnode's "next" pointer and resulting in an indefinite spin. The vulnerability is rated Medium severity (CVSS 5.5) with a local attack vector and low attack complexity, potentially leading to high availability impact (system lockup) but no confidentiality or integrity compromise. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.2, < 6.6.51CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.10.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:* | ||
6.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:* | ||
6.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025CVE-2024-46797
Oct 8, 2024kernel: powerpc/qspinlock: Fix deadlock in MCS queue
Sep 18, 2024powerpc/qspinlock: Fix deadlock in MCS queue
Sep 10, 2024