net/iucv: Avoid explicit cpumask var allocation on stack

Summary

In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.

Timeline

1. Jul 29, 2024, 5:39 PM UTCCVE published
2. Sep 10, 2024, 4:18 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 15, 2026, 12:47 AM UTCRecord last updated

Affected versions

• Linux Linux

  From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 2b085521be5292016097b5e7ca81b26be3f7098d; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 842afb47d84536fc976fece8fb6c54bea711ad1a; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 9dadab0db7d904413ea1cdaa13f127da05c31e71; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 0af718a690acc089aa1bbb95a93df833d864ef53; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in d85ca8179a54ff8cf1e1f8c3c9e3799831319bae; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 724e7965af054079242b8d6f7e50ee226730a756; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959; From 2356f4cb191100a5e92d537f13e5efdbc697e9cb · fixed in be4e1304419c99a164b4c0e101c7c2a756b635b9

• Linux Linux

  2.6.21

• KernelLinux

  From 2.6.21 · fixed in 4.19.317; From 4.20.0 · fixed in 5.4.279; From 5.5.0 · fixed in 5.10.221; From 5.11.0 · fixed in 5.15.162; From 5.16.0 · fixed in 6.1.97; From 6.2.0 · fixed in 6.6.37; From 6.7.0 · fixed in 6.9.8

References 8