PT-2024-36851 · Linux · Linux Kernel

Published 2024-11-12 · Updated 2025-01-01 · CVE-2024-56547

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a missed RCU barrier on deoffloading in the Linux kernel. Running the rcutorture test with specific parameters can trigger a warning and a deadlock. The problem occurs when a second racing rcu barrier() on an offline CPU either observes the decremented callback counter down to 0 and spares the callback enqueue, or rcuo observes the new callback and keeps rdp->nocb cb sleep to false. To fix this, it is necessary to check rdp->nocb cb sleep before parking to ensure no further rcu barrier() is waiting on the rdp.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2026-03763

CVE-2024-56547

Affected Products

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56547.json · Exploit
• https://bdu.fstec.ru/vul/2026-03763 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://git.kernel.org/stable/c/224b62028959858294789772d372dcb36cf5f820 · Patch
• https://cve.org/CVERecord?id=CVE-2024-56547 · Security Note
• https://osv.dev/vulnerability/CVE-2024-56547 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-56547 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56547 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://git.kernel.org/stable/c/2996980e20b7a54a1869df15b3445374b850b155 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-56547 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-56547 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56547 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-56547 · Vendor Advisory
• https://twitter.com/CVEnew/status/1872651448074301474 · Twitter Post