PT-2024-7868 · Linux+6 · Linux Kernel+6
Miaohe Lin
·
Published
2024-04-16
·
Updated
2025-09-29
·
CVE-2024-26987
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The vulnerability is related to a deadlock that occurs when the
hugetlb optimize vmemmap feature is enabled in the Linux kernel. This deadlock can happen when a task tries to acquire a lock that is already held by another task, causing a circular locking dependency. The issue is related to the pcp batch high lock and cpu hotplug lock locks.The vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition, where the system becomes unresponsive or crashes.
To mitigate this issue, it is recommended to update the Linux kernel to version 6.6.37 or later, which includes the fix for this vulnerability.
Recommendations
For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to fix the deadlock issue.
As a temporary workaround, consider disabling the
hugetlb optimize vmemmap feature to prevent the deadlock from occurring. However, this may have performance implications and should be thoroughly tested before implementation.It is also recommended to monitor system logs for any signs of deadlock or system crashes and to have a backup plan in place in case of a system failure.
Note: The above recommendations are based on the provided input data and may not be comprehensive or applicable to all scenarios. It is always recommended to consult the official Linux kernel documentation and security advisories for the most up-to-date and accurate information.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Ubuntu