PT-2024-9779 · Linux+6 · Linux Kernel+6
Published
2024-05-16
·
Updated
2025-09-29
·
CVE-2024-38618
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the ALSA timer in the Linux kernel, which previously had no lower limit for the start tick time, allowing very small sizes. This could lead to an unexpected RCU stall, where the callback repeatedly queues the expire update. A patch has been introduced to set a lower bound of 100us for the start tick time, preventing such situations. The vulnerability is also related to the cpufreq component, where improper input validation in the cpufreq offline() and cpufreq remove dev() functions could allow an attacker to cause a denial of service.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu