PT-2024-32763 · Linux+3 · Linux Kernel+3

Published 2024-07-29 · Updated 2025-06-13 · CVE-2024-47716

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description The issue is related to the handling of floating point instructions in userspace, which can cause some ARM kernels built with clang/LLD 17.0.6 to crash. The problem occurs when the kernel is built with DYNAMIC DEBUG=n, as the pr debug() calls act as barriers even when not activated. A minimal userspace reproducer is available, and the bug can be consistently triggered using a specific Python command. The issue is resolved in upstream kernel version 6.6.58.

Recommendations For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider building the kernel with DYNAMIC DEBUG=y to avoid the crash. Additionally, avoid using the vulnerable vfp support entry() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-388

Related Identifiers

AZL-51300

BDU:2025-03422

CVE-2024-47716

MGASA-2024-0344

MGASA-2024-0345

OESA-2025-1629

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

USN-7276-1

USN-7277-1

USN-7301-1

USN-7303-1

USN-7303-2

USN-7303-3

USN-7304-1

USN-7310-1

USN-7311-1

USN-7384-1

USN-7384-2

USN-7385-1

USN-7386-1

USN-7403-1

Affected Products

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 1370

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47716.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50277 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory