PT-2025-2815 · Linux+2 · Linux Kernel+2

Sebastian Andrzej Siewior

·

Publicado

2024-11-22

·

Atualizado

2025-09-23

·

CVE-2024-48876

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue concerns a problem in the Linux kernel where the function stack depot save flags() could potentially cause a deadlock when called from an NMI context. This happened because the function attempted to take the pool lock to save a stack trace, even when STACK DEPOT FLAG CAN ALLOC was unset. To resolve this, the function now only tries to take the lock in NMI context and gives up if it's unsuccessful, thus avoiding deadlock. The documentation has been updated to reflect this change.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2025-04660
CVE-2024-48876
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Produtos afetados

Linuxmint
Linux Kernel
Ubuntu