PT-2024-29213 · Linux+4 · Linux Kernel+4

Nick Bowler · Published 2024-06-26 · Updated 2025-10-07 · CVE-2024-41032

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from systems where cpu possible mask has gaps between set CPUs, such as SPARC. In this scenario, the addr to vb xa() hash function can return an index that accesses not-possible and not setup CPU areas using the per cpu() macro, resulting in an oops on SPARC. A per-cpu vmap block queue is also used as a hash table, incorrectly assuming cpu possible mask has no gaps. The fix involves adjusting the index to the next possible CPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-08043

CVE-2024-41032

INFSA-2024_9315

MGASA-2024-0277

MGASA-2024-0278

OESA-2025-1097

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7089-1

USN-7089-2

USN-7089-3

USN-7089-4

USN-7089-5

USN-7089-6

USN-7089-7

USN-7090-1

USN-7095-1

USN-7156-1

Affected Products

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 1699

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41032.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-41032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53122 · Security Note
• https://ubuntu.com/security/CVE-2024-46803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46737 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46711 · Security Note
• https://ubuntu.com/security/CVE-2024-42104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49988 · Security Note
• https://ubuntu.com/security/CVE-2024-41090 · Vendor Advisory