Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Terrence Xu

Researcher fromIntel
#36895of 53,635
7.5Total CVSS
Vulnerabilities · 1
PT-2024-26826
7.5
2024-03-13
Linux · Linux Kernel · CVE-2024-35989
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.37 **Description** The issue occurs during the removal of the idxd driver on single-CPU platforms, where the registered offline callback is invoked as part of the clean-up process. However, with only one CPU online, there is no valid target to migrate the perf context, resulting in a kernel oops. This happens due to a page fault for a non-present page, causing the kernel to crash. The problem is fixed by preventing the migration of the perf context to an invalid target. **Recommendations** To resolve the issue, update the Linux kernel to version 6.6.37 or later. If updating is not possible, consider disabling the idxd driver or restricting its use on single-CPU platforms until a patch is available.