PT-2024-37012 · Linux+6 · Linux Kernel+6
Published
2024-12-28
·
Updated
2026-03-14
·
CVE-2024-56701
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.0-rc4
Description
A bug in the Linux kernel has been resolved. The issue was related to the dtl access lock, which needed to be a rw semaphore, a sleeping lock, because the code calls kmalloc() while holding it, which can sleep. This bug could cause a sleeping function to be called from an invalid context. The estimated number of potentially affected devices is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations
For Linux kernel versions prior to 6.10.0-rc4, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the
vcpudispatch stats write function until a patch is available. Restrict access to the /proc/powerpc/vcpudispatch stats API endpoint to minimize the risk of exploitation. Avoid using the dtl access lock variable in the affected code until the issue is resolved.Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu