PT-2024-31335 · Linux+1 · Linux Kernel+1

David Wang · Published 2024-08-19 · Updated 2025-02-08 · CVE-2024-44968

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the Linux kernel, where a recent fix for making the takeover of the broadcast timer more reliable retrieves a per CPU pointer in preemptible context. This went unnoticed as compilers hoist the access into the non-preemptible region where the pointer is actually used, triggering a bug when using smp processor id() in preemptible code. The caller is hotplug cpu broadcast tick pull+0x1c/0xc0. The fix involves moving the per CPU pointer access into the atomic section.

Recommendations Update to Linux kernel version 6.6.50 or later to resolve the issue. As a temporary workaround, consider restricting access to the hotplug cpu broadcast tick pull function until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-01952

CVE-2024-44968

DLA-3912-1

DLA-4008-1

MGASA-2024-0309

MGASA-2024-0310

OESA-2025-1097

Affected Products

Linux Kernel

Red Os

References · 193

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44968.json · Exploit
• https://git.kernel.org/stable/c/f91fb47ecacc178a83a77eeebd25cbaec18c01d6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-56687 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57922 · Security Note
• https://git.kernel.org/stable/c/f54abf332a2bc0413cfa8bd6a8511f7aa99faea0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-53100 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53123 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56769 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1097 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-44968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-50189 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-50077 · Security Note
• https://git.kernel.org/stable/c/b9d604933d5fd72dd37f24e1dc35f778297d745a · Patch
• https://git.kernel.org/stable/c/7dd12f85f150010ef7518201c63fa7e395f5c3e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-53122 · Security Note