{
  "cveId": "CVE-2024-44937",
  "url": "https://patchblox.com/security/cve/CVE-2024-44937",
  "summary": "CVE-2024-44937 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-44937, released August 26, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86: intel-vbtn: Protect ACPI notify ha...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  platform/x86: intel-vbtn: Protect ACPI notify handler against recursion  Since commit e2ffcda16290 (\u0022ACPI: OSL: Allow Notify () handlers to run on all CPUs\u0022) ACPI notify handlers like the intel-vbtn notify_handler() may run on multiple CPU cores racing with themselves.  This race gets hit on Dell Venue 7140 tablets when undocking from the keyboard, causing the handler to try and register priv-\u003Eswitches_dev twice, as can be seen from the dev_info() message getting logged twice:  [ 83.861800] intel-vbtn INT33D6:00: Registering Intel Virtual Switches input-dev after receiving a switch event [ 83.861858] input: Intel Virtual Switches as /devices/pci0000:00/0000:00:1f.0/PNP0C09:00/INT33D6:00/input/input17 [ 83.861865] intel-vbtn INT33D6:00: Registering Intel Virtual Switches input-dev after receiving a switch event  After which things go seriously wrong: [ 83.861872] sysfs: cannot create duplicate filename \u0027/devices/pci0000:00/0000:00:1f.0/PNP0C09:00/INT33D6:00/input/input17\u0027 ... [ 83.861967] kobject: kobject_add_internal failed for input17 with -EEXIST, don\u0027t try to register things with the same name in the same directory. [ 83.877338] BUG: kernel NULL pointer dereference, address: 0000000000000018 ...  Protect intel-vbtn notify_handler() from racing with itself with a mutex to fix this.",
  "published": "2024-08-26T11:15:05Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00182,
  "epssPercentile": 0.07827,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-44937",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-44937",
      "released": "2024-08-26T11:15:05Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-44937",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-44937",
      "released": "2024-08-26T11:15:05Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}