PT-2024-34081 · Linux+6 · Linux Kernel+6
Published
2024-10-28
·
Updated
2025-10-03
·
CVE-2024-50249
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A vulnerability in the Linux kernel has been resolved by updating the rmw lock to a raw spinlock. The issue was triggered by a BUG that caused an invalid wait context, resulting in a kernel crash. The vulnerability is related to the ACPI CPPC (Collaborative Processor Performance Control) and the locking mechanism used by the sugov update shared function. The function locks a raw spinlock while the cpc write function locks a spinlock, causing a wait-type order issue. To resolve this issue, the rmw lock is updated to a raw spinlock, ensuring that interrupts are disabled on the CPU holding it.
Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the cpc write function until a patch is available. Restrict access to the sugov update shared function to minimize the risk of exploitation. Avoid using the rmw lock variable in the affected kernel code until the issue is resolved.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu