PT-2025-3315 · Linux+3 · Linux Kernel+3
Published
2024-12-17
·
Updated
2025-09-29
·
CVE-2024-56768
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to the fixed version
Description
A bug in the Linux kernel has been resolved, specifically in the bpf get smp processor id() function when CONFIG SMP is disabled. On x86-64, calling this function can trigger an error because pcpu hot is unavailable, resulting in a page fault. The error message includes details such as "BUG: unable to handle page fault for address" and "supervisor read access in kernel mode." The fix involves inlining a return 0 in the case where CONFIG SMP is disabled.
Recommendations
For Linux Kernel versions prior to the fixed version, the issue can be resolved by applying the fix that inlines a return 0 in the !CONFIG SMP case. As a temporary workaround, consider disabling the
bpf get smp processor id() function until a patch is available. Restrict access to the affected kernel module to minimize the risk of exploitation. Avoid using the pcpu hot variable in the affected kernel mode until the issue is resolved.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Linuxmint
Ubuntu