PT-2024-26826 · Linux+9 · Linux Kernel+9
Terrence Xu
·
Published
2024-03-13
·
Updated
2025-09-29
·
CVE-2024-35989
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue occurs during the removal of the idxd driver on single-CPU platforms, where the registered offline callback is invoked as part of the clean-up process. However, with only one CPU online, there is no valid target to migrate the perf context, resulting in a kernel oops. This happens due to a page fault for a non-present page, causing the kernel to crash. The problem is fixed by preventing the migration of the perf context to an invalid target.
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.37 or later. If updating is not possible, consider disabling the idxd driver or restricting its use on single-CPU platforms until a patch is available.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu