IT

Tracker / CVE-2024-42094

CVE-2024-42094

High 7.1

In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.

Affected products and versions

linux linux_kernel · … → 4.19.317
linux linux_kernel · 4.20 → 5.4.279
linux linux_kernel · 5.11 → 5.15.162
linux linux_kernel · 5.16 → 6.1.97
linux linux_kernel · 5.5 → 5.10.221
linux linux_kernel · 6.2 → 6.6.37
linux linux_kernel · 6.7 → 6.9.8

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References