CVE-2024-26719: nouveau: offload fence uevents work to workqueue

CVE-2024-26719 PUBLISHED

nouveau: offload fence uevents work to workqueue

Reported by linux · Published April 3, 2024

In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between the fctx lock and the irq lock. This offloads the processing off the work from the irq into a workqueue.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
linux_kernel	linux	6.7.6, 6.6.18

Affected products

Vendor	Product	Versions
Linux	Linux	8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3, 8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3, 8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3
Linux	Linux	6.2, 0, 6.6.18
linux	linux_kernel	6.2, 6.2, 6.2
Linux	Linux	8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3, 8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3, 8c880fd4c155d9b1b3e294169d7dc3f3a1e04bd3

Timeline

Apr 3, 2024 CVE Published
Apr 4, 2024 EPSS Score (30 in total, the first dated here)
Oct 4, 2024 Coalition ESS Score (8 in total, the first dated here)
Feb 3, 2025 CVE Updated
Jan 15, 2026 Security Advisory (258 in total, the first dated here)
Mar 31, 2026 Distribution Patch (221 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-26719
vulnetix vdb fixes CVE-2024-26719

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-26719/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →