PT-2024-36921 · Linux+4 · Linux Kernel+4
Jiwei Sun
·
Published
2024-11-13
·
Updated
2025-10-03
·
CVE-2024-56613
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A memory leak issue has been identified in the Linux kernel, specifically in the sched/numa component, due to the overwritten vma->numab state. This issue can be consistently reproduced on servers with multiple cores when running the hackbench program of LTP. The problem occurs when multiple threads access a shared vma simultaneously, causing vma->numab state to be overwritten. The issue can be resolved by using the cmpxchg atomic operation to ensure that only one thread executes the vma->numab state assignment.
Recommendations
To resolve this issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the
task numa work() function until a patch is available. Restrict access to the vulnerable vma->numab state variable to minimize the risk of exploitation. Avoid using the hackbench program with the thread argument until the issue is resolved.Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu