PT-2025-3642 · Linux+5 · Linux Kernel+5
Li Huafei
·
Published
2024-11-14
·
Updated
2025-10-16
·
CVE-2024-57917
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A vulnerability has been resolved in the Linux kernel related to the topology subsystem, specifically when printing cpumap. During fuzz testing, a warning was discovered due to different return values from vsnprintf. The issue arises from the modification of core cpumask between the calculation of the formatted string length and the actual string formatting, leading to inconsistent lengths. This occurs when cpu hotplugging is performed during printing. The
kvasprintf() function reports this warning during the printing of core siblings list. The function has several steps, including calculating the length of the resulting formatted string, allocating a buffer, performing the actual string formatting, and checking the consistency of the lengths.Recommendations
To resolve this issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider restricting cpu hotplugging during critical printing processes to minimize the risk of exploitation.
Exploit
Fix
Race Condition
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu