LiveActive security incident?Get immediate response
CVE Record

CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: move the EST lock to struct stmmac_priv Reinitialize the whole EST structure would also reset the mutex lock which is embedded in the EST structure, and then trigger the following warning. To address this, move the lock to struct stmmac_priv. We also need to reacquire the mutex lock when doing this initialization. DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 3 PID: 505 at kernel/locking/mutex.c:587 __mutex_lock+0xd84/0x1068 Modules linked in: CPU: 3 PID: 505 Comm: tc Not tainted 6.9.0-rc6-00053-g0106679839f7-dirty #29 Hardware name: NXP i.MX8MPlus EVK board (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mutex_lock+0xd84/0x1068 lr : __mutex_lock+0xd84/0x1068 sp : ffffffc0864e3570 x29: ffffffc0864e3570 x28: ffffffc0817bdc78 x27: 0000000000000003 x26: ffffff80c54f1808 x25: ffffff80c9164080 x24: ffffffc080d723ac x23: 0000000000000000 x22: 0000000000000002 x21: 0000000000000000 x20: 0000000000000000 x19: ffffffc083bc3000 x18: ffffffffffffffff x17: ffffffc08117b080 x16: 0000000000000002 x15: ffffff80d2d40000 x14: 00000000000002da x13: ffffff80d2d404b8 x12: ffffffc082b5a5c8 x11: ffffffc082bca680 x10: ffffffc082bb2640 x9 : ffffffc082bb2698 x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000000001 x5 : ffffff8178fe0d48 x4 : 0000000000000000 x3 : 0000000000000027 x2 : ffffff8178fe0d50 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: __mutex_lock+0xd84/0x1068 mutex_lock_nested+0x28/0x34 tc_setup_taprio+0x118/0x68c stmmac_setup_tc+0x50/0xf0 taprio_change+0x868/0xc9c

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysislow

Security readout for executives and security teams

Plain-English summary

CVE-2024-38594 is a Linux kernel driver flaw in the stmmac Ethernet code. Reinitializing an EST structure could reset an embedded mutex, causing a kernel lock warning during traffic-control changes. The source bundle does not show remote exploitation, public exploitation, or a CVSS score.

Executive priority

Treat this as a targeted Linux reliability issue, not a broad emergency from the provided evidence. Prioritize systems where stmmac Ethernet and traffic scheduling are operationally important, especially embedded or network-facing appliances.

Technical view

The issue is in Linux stmmac EST handling. Reinitializing the EST structure also reset its embedded mutex, later triggering DEBUG_LOCKS_WARN_ON during tc/taprio setup. The fix moves the EST lock into struct stmmac_priv and reacquires it during initialization.

Likely exposure

Exposure appears limited to Linux systems using the stmmac Ethernet driver and EST/TAPRIO traffic-control features. The record lists Linux as affected and references stable kernel fixes, but downstream distribution package status must be checked separately.

Exploitation context

The cited trace involves the local tc utility configuring taprio. No source in the bundle states active exploitation, KEV listing, remote reachability, privilege requirements, or weaponized exploit availability.

Researcher notes

Evidence supports a kernel locking defect fixed upstream. The bundle does not provide CVSS, CWE, exploitability analysis, or distribution-specific fixed versions. Avoid assuming remote attack surface without additional vendor evidence.

Mitigation direction

  • Map affected hosts using the stmmac driver and EST/TAPRIO configuration.
  • Check vendor or distribution advisories for fixed kernel packages.
  • Apply kernel updates containing the referenced stable commits when available.
  • Prioritize embedded, industrial, or appliance systems using stmmac Ethernet hardware.

Validation and detection

  • Inventory kernel versions and stmmac driver usage across Linux assets.
  • Review whether TAPRIO or EST traffic control is configured.
  • Confirm installed kernels include the referenced stable fixes or vendor backports.
  • Monitor kernel logs for mutex or taprio-related warnings on affected systems.
Prepared
Confidence
medium
Sources
6

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-38594 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
2ADP providers
5Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CVECVE Program Container
CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinuxb2aae654a4794ef898ad33a179f341eb610f6b85, b2aae654a4794ef898ad33a179f341eb610f6b85, b2aae654a4794ef898ad33a179f341eb610f6b85, b2aae654a4794ef898ad33a179f341eb610f6b85, b2091d47a14e8e6b3f03d792c1b25255d60b3219, 5ce4cc16d47186f0b76254e6f27beea25bafc1d9unaffected
LinuxLinux5.14, 0, 6.6.55, 6.8.12, 6.9.3, 6.10affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.