PT-2024-5406 · Linux+6 · Linux Kernel+6

Published 2024-05-30 · Updated 2026-03-14 · CVE-2024-38667

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the corruption of pt regs in the Linux kernel for secondary idle threads on RISC-V processors. The top of the kernel thread stack should be reserved for pt regs, but this is not the case for the idle threads of the secondary boot harts, causing their stacks to overlap with their pt regs and potentially leading to corruption. A similar issue was fixed for the primary hart, but the fix was not propagated to the secondary harts. The problem was noticed in some CPU hotplug tests with V enabled, where the function smp callin stored several registers on the stack, corrupting the top of the pt regs structure, including the status field, resulting in the kernel attempting to save or restore an inexistent V context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2024-11524

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-42901

BDU:2024-06050

CVE-2024-38667

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-2321

OESA-2024-2322

OESA-2024-2324

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

USN-7166-1

USN-7166-2

USN-7166-3

USN-7166-4

USN-7186-1

USN-7186-2

USN-7194-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 785

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38667.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-47757 · Security Note
• https://git.kernel.org/stable/c/ea22d4195cca13d5fdbc4d6555a2dfb8a7867a9e · Patch
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24490 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53057 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7166-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47709 · Security Note
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory