PT-2024-32234 · Linux+6 · Linux Kernel+6

Serge Semin · Published 2024-08-20 · Updated 2026-03-14 · CVE-2024-46832

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is caused by the get c0 compare int function being called on a secondary CPU when a timer IRQ is installed, resulting in a warning about a sleeping function being called from an invalid context. This warning occurs at kernel/locking/mutex.c:283. The problem is resolved by not calling get c0 compare int if a timer IRQ is installed. Additionally, saving the IRQ number to struct clock event device *cd is skipped as it is never used by the clockevent core and is only meant for non-CPU local devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-12535

ALT-PU-2024-12541

ALT-PU-2024-13979

ALT-PU-2024-14046

ALT-PU-2024-15824

BDU:2025-01677

CVE-2024-46832

DLA-4008-1

DSA-5782-1

OESA-2025-1110

USN-7100-1

USN-7100-2

USN-7123-1

USN-7144-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7194-1

USN-7196-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 885

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46832.json · Exploit
• https://ubuntu.com/security/CVE-2024-41079 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2024-46832 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46753 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24490 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57841 · Security Note
• https://ubuntu.com/security/CVE-2024-53057 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory