Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-42093

net/dpaa2: Avoid explicit cpumask var allocation on stack

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.279, 5.10.221, 5.15.162, 6.1.97, 6.6.37, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in b2262b3be27cee334a2fa175ae3afb53f38fb0b1; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in 763896ab62a672d728f5eb10ac90d98c607a8509; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in a55afc0f5f20ba30970aaf7271929dc00eee5e7d; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in 48147337d7efdea6ad6e49f5b8eb894b95868ef0; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in 69f49527aea12c23b78fb3d0a421950bf44fb4e2; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in 5e4f25091e6d06e99a23f724c839a58a8776a527; From 93ddf0b211a0a0367d01c9587169c16ed77b4b98 · fixed in d33fe1714a44ff540629b149d8fab4ac6967585c

  • Linux Linux

    4.16

  • KernelLinux

    From 4.16.0 · fixed in 5.4.279; From 5.5.0 · fixed in 5.10.221; From 5.11.0 · fixed in 5.15.162; From 5.16.0 · fixed in 6.1.97; From 6.2.0 · fixed in 6.6.37; From 6.7.0 · fixed in 6.9.8

References 7

git.kernel.org