5.5
CVE-2024-44968
- EPSS 0.02%
- Published 04.09.2024 19:15:31
- Last modified 03.11.2025 23:15:45
- Source 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Open
In the Linux kernel, the following vulnerability has been resolved:
tick/broadcast: Move per CPU pointer access into the atomic section
The recent fix for making the take over of the broadcast timer more
reliable retrieves a per CPU pointer in preemptible context.
This went unnoticed as compilers hoist the access into the non-preemptible
region where the pointer is actually used. But of course it's valid that
the compiler keeps it at the place where the code puts it which rightfully
triggers:
BUG: using smp_processor_id() in preemptible [00000000] code:
caller is hotplug_cpu__broadcast_tick_pull+0x1c/0xc0
Move it to the actual usage site which is in a non-preemptible region.Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.1.103 < 6.1.105
Linux ≫ Linux Kernel Version >= 6.6.44 < 6.6.46
Linux ≫ Linux Kernel Version >= 6.10.3 < 6.10.5
Linux ≫ Linux Kernel Version6.11 Updaterc1
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.051 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|