PT-2025-2815 · Linux+2 · Linux Kernel+2

Sebastian Andrzej Siewior · Published 2024-11-22 · Updated 2025-09-23 · CVE-2024-48876

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue concerns a problem in the Linux kernel where the function stack depot save flags() could potentially cause a deadlock when called from an NMI context. This happened because the function attempted to take the pool lock to save a stack trace, even when STACK DEPOT FLAG CAN ALLOC was unset. To resolve this, the function now only tries to take the lock in NMI context and gives up if it's unsuccessful, thus avoiding deadlock. The documentation has been updated to reflect this change.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

CWE-833

Related Identifiers

BDU:2025-04660

CVE-2024-48876

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 2452

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48876.json · Exploit
• https://bdu.fstec.ru/vul/2025-13981 · Security Note
• https://ubuntu.com/security/CVE-2024-56648 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56709 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57896 · Security Note
• https://ubuntu.com/security/CVE-2024-53129 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50075 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57902 · Security Note
• https://ubuntu.com/security/CVE-2024-56691 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05082 · Security Note
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06986 · Security Note
• https://ubuntu.com/security/CVE-2024-50096 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05075 · Security Note
• https://ubuntu.com/security/CVE-2024-53141 · Vendor Advisory