CVE-2024-47744 describes a potential deadlock vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) component, specifically affecting x86 architectures. The issue arises from a complex chain of locks and SRCU synchronizations, where multiple CPUs can become deadlocked while attempting to acquire various mutexes. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity, and its primary impact is a high availability loss (denial of service). While the vulnerability is considered rare to trigger due to specific dependency and timing requirements, a dedicated mutex has been implemented to protect kvm_usage_count to mitigate this specific deadlock. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.3, < 6.6.54CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.10.13CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.11, < 6.11.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025HP ThinPro 8.1 SP7 Security Updates
Jun 3, 2025CVE-2024-47744
Nov 12, 2024kernel: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
Oct 21, 2024KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
Oct 8, 2024