PT-2024-28107 · Linux+6 · Linux Kernel+6
Marc Hartmayer
·
Published
2024-04-08
·
Updated
2025-09-29
·
CVE-2024-38661
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.9.0-rc7
Description
A system crash occurs when the /sys/bus/ap/a[pq]mask file is updated with a relative mask value, such as +0x10-0x12,+60,-90, where one of the numeric values exceeds INT MAX. The issue arises from using a simple int for internal variables, which can lead to an overflow. The fix involves using unsigned long values for the internal variables.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the s390/ap: Fix crash in AP internal function modify bitmap() vulnerability. As a temporary workaround, consider restricting access to the /sys/bus/ap/a[pq]mask file to minimize the risk of exploitation.
Exploit
Fix
Use After Free
Integer Overflow
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu