PT-2024-34042 · Linux+3 · Linux Kernel+3
Petr Pavlu
·
Published
2024-10-15
·
Updated
2025-09-29
·
CVE-2024-50207
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel (affected versions not specified)
Description:
The issue concerns the Linux kernel's ring-buffer, where the function
ring buffer subbuf order set() updates each ring buffer per cpu and installs new sub buffers that match the requested page order. This operation may be invoked concurrently with readers that rely on some of the modified data, such as the head bit (RB PAGE HEAD), or the ring buffer per cpu.pages and reader page pointers. However, no exclusive access is acquired by ring buffer subbuf order set(). Modifying the mentioned data while a reader also operates on them can then result in incorrect memory access and various crashes. The problem is fixed by taking the reader lock when updating a specific ring buffer per cpu in ring buffer subbuf order set().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Linuxmint
Ubuntu