PT-2024-33871 · Linux+6 · Linux Kernel+6
Published
2024-10-21
·
Updated
2025-10-03
·
CVE-2024-50031
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
The issue arises because, upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed, the active performance monitor's pointer is still retained. If the program is run again, the driver will attempt to stop the active performance monitor using the stale pointer. This pointer is no longer valid because the previous process has already terminated, and all performance monitors associated with it have been destroyed and freed.
Recommendations:
To fix this, when the active performance monitor belongs to a given process, explicitly stop it before destroying and freeing it. Update to Linux kernel version 6.6.58 or later to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu