PT-2024-9782 · Linux+4 · Linux Kernel+4
Guenter Roeck
·
Published
2024-05-08
·
Updated
2025-09-17
·
CVE-2024-38613
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a spinlock race in kernel thread creation. Context switching retains the correct lock owner across the switch from 'prev' to 'next' tasks, relying on interrupts remaining disabled for the entire duration of the switch. However, for newly created kernel threads, the status register is set to PS S in copy thread(), which leaves the IPL at 0, and upon restoring the 'next' thread's status register in switch to() aka resume(), interrupts become enabled prematurely. This causes a spinlock recursion warning as reported by Guenter Roeck. The race has been opened in commit 533e6903bea0 ("m68k: split ret from fork(), simplify kernel thread()").
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu