PT-2024-35552 · Linux+5 · Linux Kernel+5

Published 2024-10-23 · Updated 2026-03-13 · CVE-2024-53089

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc2+

Description The issue is related to the Linux kernel's KVM (Kernel-based Virtual Machine) component, specifically affecting LoongArch architecture. On PREEMPT RT enabled kernels, unmarked hrtimers are moved into soft interrupt expiry mode by default. However, the timers are canceled from a preempt-notifier, which is invoked with disabled preemption, not allowed on PREEMPT RT. This results in a "scheduling while atomic" bug. The fix involves marking hrtimers to expire in hard interrupt context, even on PREEMPT RT enabled kernels.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for this bug. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-664

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-54611

AZL-54620

BDU:2025-15076

CVE-2024-53089

ECHO-3FD3-AE3A-410E

OESA-2024-2492

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7524-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 1168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53089.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50277 · Vendor Advisory