PT-2024-21526 · Linux+1 · Linux Kernel+1

Published 2024-02-23 · Updated 2026-03-13 · CVE-2024-26841

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc5+

Description The issue is related to the LoongArch architecture in the Linux kernel. When disabling non-boot CPUs, the cpu sibling map is not updated correctly, leading to errors on SMT systems, such as a "jump label: negative count!" warning. This is due to the lack of a clear cpu sibling map() function call when disabling CPUs. The problem occurs in the static key slow dec cpuslocked() function.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this problem. Specifically, apply the patch that defines and calls clear cpu sibling map() when disabling non-boot CPUs. As a temporary workaround, consider disabling SMT or avoiding the disabling of non-boot CPUs to minimize the risk of encountering this error.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-459

CWE-121

Related Identifiers

AZL-59453

BDU:2026-01452

CVE-2024-26841

ECHO-67C3-CF1F-C2FC

Affected Products

Debian

Linux Kernel

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26841.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-26841 · Vendor Advisory
• https://git.kernel.org/stable/c/0d862db64d26c2905ba1a6a8561466b215b664c2 · Patch
• https://ubuntu.com/security/CVE-2024-26841 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26841 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-59453 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01452 · Security Note
• https://git.kernel.org/stable/c/752cd08da320a667a833803a8fd6bb266114cce5 · Patch
• https://git.kernel.org/stable/c/b1ec3d6b86fdd057559a5908e6668279bf770e0e · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-26841 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26841 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26841 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26841 · Security Note
• https://osv.dev/vulnerability/CVE-2024-26841 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-26841 · Vendor Advisory