PT-2024-21626 · Linux · Linux Kernel

Published 2024-05-01 · Updated 2024-05-01 · CVE-2024-27055

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from the function wq update node max active() incorrectly calling cpumask test cpu() with -1 CPU, leading to kernel panics on some architectures. This occurs when @off cpu is -1, indicating no CPU is going down. The error results in a kernel paging request and an attempt to kill the idle task, causing a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-27055

Affected Products

Linux Kernel

References · 16

• https://ubuntu.com/security/CVE-2024-27055 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27055 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-27055 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-27055 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-27055 · Vendor Advisory
• https://git.kernel.org/stable/c/7df62b8cca38aa452b508b477b16544cba615084 · Note
• https://git.kernel.org/stable/c/a75ac2693d734d20724f0e10e039ca85f1fcfc4e · Note
• https://git.kernel.org/linus/15930da42f8981dc42c19038042947b475b19f47 · Note
• https://git.kernel.org/stable/c/38c19c44cc05ec1e84d2e31a9a289b83b6c7ec85 · Note
• https://lore.kernel.org/all/[e-mail] · Note
• https://twitter.com/CVEnew/status/1785674725475127425 · Twitter Post
• https://git.kernel.org/stable/c/15930da42f8981dc42c19038042947b475b19f47 · Note
• https://git.kernel.org/stable/c/adc646d2126988a64234502f579e4bc2b080d7cf · Note
• https://git.kernel.org/stable/c/9fc557d489f8163c1aabcb89114b8eba960f4097 · Note