Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-47744

15
FAUCET Score

CVE-2024-47744 describes a potential deadlock vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) component, specifically affecting x86 architectures. The issue arises from a complex chain of locks and SRCU synchronizations, where multiple CPUs can become deadlocked while attempting to acquire various mutexes. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity, and its primary impact is a high availability loss (denial of service). While the vulnerability is considered rare to trigger due to specific dependency and timing requirements, a dedicated mutex has been implemented to protect kvm_usage_count to mitigate this specific deadlock. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.3, < 6.6.54CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.13CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.11, < 6.11.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.17%
Probability of exploitation in next 30 days
EPSS Percentile
6.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0017 is in the 36th percentile among its peer group of 15,940 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17603-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17610-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.56.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.56.1-5

Vendor Advisories (5)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
microsoft2024-Nov/CVE-2024-47744

CVE-2024-47744

Nov 12, 2024
redhatCVE-2024-47744Moderate

kernel: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock

Oct 21, 2024
microsoft2024-Oct/CVE-2024-47744Moderate

KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock

Oct 8, 2024

References

git.kernel.org / stable/c/44d17459626052a2390457e550a12cb973506b2f
Patch
git.kernel.org / stable/c/4777225ec89f52bb9ca16a33cfb44c189f1b7b47
Patch
git.kernel.org / stable/c/760a196e6dcb29580e468b44b5400171dae184d8
Patch
git.kernel.org / stable/c/a2764afce521fd9fd7a5ff6ed52ac2095873128a
Patch