CVE-2024-26983

On the time to free xbc memory in xbcexit(), memblock may has handed over memory to buddy allocator. So it doesn't make sense to free memory back to memblock. memblockfree() called by xbcexit() even causes UAF bugs on architectures with CONFIGARCHKEEPMEMBLOCK disabled like x86. Following KASAN logs shows this case.

This patch fixes the xbc memory free problem by calling memblockfree() in early xbc init error rewind path and calling memblockfree_late() in xbc exit path to free memory to buddy allocator.

[ 9.410890] ================================================================== [ 9.418962] BUG: KASAN: use-after-free in memblockisolaterange+0x12d/0x260 [ 9.426850] Read of size 8 at addr ffff88845dd30000 by task swapper/0/1

[ 9.435901] CPU: 9 PID: 1 Comm: swapper/0 Tainted: G U 6.9.0-rc3-00208-g586b5dfb51b9 #5 [ 9.446403] Hardware name: Intel Corporation RPLP LP5 (CPU:RaptorLake)/RPLP LP5 (ID:13), BIOS IRPPN02.01.01.00.00.19.015.D-00000000 Dec 28 2023 [ 9.460789] Call Trace: [ 9.463518] <TASK> [ 9.465859] dumpstacklvl+0x53/0x70 [ 9.469949] printreport+0xce/0x610 [ 9.473944] ? _virtaddrvalid+0xf5/0x1b0 [ 9.478619] ? memblockisolaterange+0x12d/0x260 [ 9.483877] kasanreport+0xc6/0x100 [ 9.487870] ? memblockisolaterange+0x12d/0x260 [ 9.493125] memblockisolaterange+0x12d/0x260 [ 9.498187] memblockphysfree+0xb4/0x160 [ 9.502762] ? _pfxmemblockphysfree+0x10/0x10 [ 9.508021] ? mutexunlock+0x7e/0xd0 [ 9.512111] ? _pfxmutexunlock+0x10/0x10 [ 9.516786] ? kernelinitfreeable+0x2d4/0x430 [ 9.521850] ? _pfxkernelinit+0x10/0x10 [ 9.526426] xbcexit+0x17/0x70 [ 9.529935] kernelinit+0x38/0x1e0 [ 9.533829] ? rawspinunlockirq+0xd/0x30 [ 9.538601] retfromfork+0x2c/0x50 [ 9.542596] ? _pfxkernelinit+0x10/0x10 [ 9.547170] retfromforkasm+0x1a/0x30 [ 9.551552] </TASK>

[ 9.555649] The buggy address belongs to the physical page: [ 9.561875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x45dd30 [ 9.570821] flags: 0x200000000000000(node=0|zone=2) [ 9.576271] page_type: 0xffffffff() [ 9.580167] raw: 0200000000000000 ffffea0011774c48 ffffea0012ba1848 0000000000000000 [ 9.588823] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 9.597476] page dumped because: kasan: bad access detected

[ 9.605362] Memory state around the buggy address: [ 9.610714] ffff88845dd2ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 9.618786] ffff88845dd2ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 9.626857] >ffff88845dd30000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 9.634930] ^ [ 9.638534] ffff88845dd30080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 9.646605] ffff88845dd30100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 9.654675] ==================================================================

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

40caa127f3c7279c75cb0c9684559fa314ee3a66

Fixed

1e7feb31a18c197d63a5e606025ed63c762f8918

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

40caa127f3c7279c75cb0c9684559fa314ee3a66

Fixed

e46d3be714ad9652480c6db129ab8125e2d20ab7

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

40caa127f3c7279c75cb0c9684559fa314ee3a66

Fixed

5a7dfb8fcd3f29fc93161100179b27f24f3d5f35

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

40caa127f3c7279c75cb0c9684559fa314ee3a66

Fixed

89f9a1e876b5a7ad884918c03a46831af202c8a0

Affected versions

v5.*

v5.14

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.86

v6.1.87

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.8.1

v6.8.2

v6.8.3

v6.8.4

v6.8.5

v6.8.6

v6.8.7

v6.9-rc1

v6.9-rc2

v6.9-rc3

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "325527792105353865429254591216184515090",
                "61222898466788361585433952793081681645",
                "66874924429408153079145686339894927917",
                "291317985249204685954983017296106319494",
                "55212846518392774450888741232303356975",
                "29200382304164673267717306117259316933",
                "44063933118291608606741338346220070219",
                "223555562210940817552243850056128059016",
                "34888949334301617067408006215882895077",
                "280374727754205991984393911358054180942",
                "187395665454025113983253350050407994380",
                "81759420635810481259403652339345502144",
                "21549632843390073693264042718140022939",
                "275903806590130658965096747053235403784",
                "285751885052538115268388961412358015687",
                "228051936453359395154805409465080317388",
                "30852991469831967898432498480712427056",
                "193730986572570840666928492756320320296",
                "286578814117939360395346226894174770643",
                "49783370438792404306093244909458549586",
                "10435999745351380797902789110429746883",
                "272974554951072346769050686958360192748",
                "221353396823458671248423707776387619733",
                "247030626515740661613789679638955472723",
                "110401573555248488579368945759952516066",
                "266682681299245287452014434713629678880",
                "28587892604432600954321114786460090923",
                "224531537563966048955792729741377695995"
            ]
        },
        "id": "CVE-2024-26983-0bb35bd0"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "function": "xbc_init",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "327229837985875790870524859540221701460",
            "length": 1059.0
        },
        "id": "CVE-2024-26983-0cd51359"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "function": "xbc_exit",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "37910208234632831169999384252115599275",
            "length": 221.0
        },
        "id": "CVE-2024-26983-146aaa5f"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "27873218432337956706185208633024670999",
            "length": 93.0
        },
        "id": "CVE-2024-26983-19f02206"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "function": "xbc_init",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "327229837985875790870524859540221701460",
            "length": 1059.0
        },
        "id": "CVE-2024-26983-1fbb4b58"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "249043324392463159741821554798328017003",
            "length": 85.0
        },
        "id": "CVE-2024-26983-215f565c"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "249043324392463159741821554798328017003",
            "length": 85.0
        },
        "id": "CVE-2024-26983-2aa32fad"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "function": "xbc_exit",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "37910208234632831169999384252115599275",
            "length": 221.0
        },
        "id": "CVE-2024-26983-4b58eb53"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "function": "xbc_exit",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "37910208234632831169999384252115599275",
            "length": 221.0
        },
        "id": "CVE-2024-26983-5712e751"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "325527792105353865429254591216184515090",
                "61222898466788361585433952793081681645",
                "66874924429408153079145686339894927917",
                "291317985249204685954983017296106319494",
                "55212846518392774450888741232303356975",
                "29200382304164673267717306117259316933",
                "44063933118291608606741338346220070219",
                "223555562210940817552243850056128059016",
                "34888949334301617067408006215882895077",
                "280374727754205991984393911358054180942",
                "187395665454025113983253350050407994380",
                "81759420635810481259403652339345502144",
                "21549632843390073693264042718140022939",
                "275903806590130658965096747053235403784",
                "285751885052538115268388961412358015687",
                "228051936453359395154805409465080317388",
                "30852991469831967898432498480712427056",
                "193730986572570840666928492756320320296",
                "286578814117939360395346226894174770643",
                "49783370438792404306093244909458549586",
                "10435999745351380797902789110429746883",
                "272974554951072346769050686958360192748",
                "221353396823458671248423707776387619733",
                "247030626515740661613789679638955472723",
                "110401573555248488579368945759952516066",
                "266682681299245287452014434713629678880",
                "28587892604432600954321114786460090923",
                "224531537563966048955792729741377695995"
            ]
        },
        "id": "CVE-2024-26983-60b3f0e2"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/bootconfig.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "100564265710934537184941233536251125202",
                "250448634874634421258881547265915036120",
                "99333521464973839793429846444999964918",
                "104110263643112386827017423649297912261"
            ]
        },
        "id": "CVE-2024-26983-634805ea"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "function": "xbc_exit",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "37910208234632831169999384252115599275",
            "length": 221.0
        },
        "id": "CVE-2024-26983-64c43374"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/bootconfig.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "100564265710934537184941233536251125202",
                "250448634874634421258881547265915036120",
                "99333521464973839793429846444999964918",
                "104110263643112386827017423649297912261"
            ]
        },
        "id": "CVE-2024-26983-80364aee"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "27873218432337956706185208633024670999",
            "length": 93.0
        },
        "id": "CVE-2024-26983-942339cd"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "function": "xbc_init",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "327229837985875790870524859540221701460",
            "length": 1059.0
        },
        "id": "CVE-2024-26983-a5898708"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "27873218432337956706185208633024670999",
            "length": 93.0
        },
        "id": "CVE-2024-26983-b2bb028f"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/bootconfig.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "100564265710934537184941233536251125202",
                "250448634874634421258881547265915036120",
                "99333521464973839793429846444999964918",
                "104110263643112386827017423649297912261"
            ]
        },
        "id": "CVE-2024-26983-b40432f9"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "325527792105353865429254591216184515090",
                "61222898466788361585433952793081681645",
                "66874924429408153079145686339894927917",
                "291317985249204685954983017296106319494",
                "55212846518392774450888741232303356975",
                "29200382304164673267717306117259316933",
                "44063933118291608606741338346220070219",
                "223555562210940817552243850056128059016",
                "34888949334301617067408006215882895077",
                "280374727754205991984393911358054180942",
                "187395665454025113983253350050407994380",
                "81759420635810481259403652339345502144",
                "21549632843390073693264042718140022939",
                "275903806590130658965096747053235403784",
                "285751885052538115268388961412358015687",
                "228051936453359395154805409465080317388",
                "30852991469831967898432498480712427056",
                "193730986572570840666928492756320320296",
                "286578814117939360395346226894174770643",
                "49783370438792404306093244909458549586",
                "10435999745351380797902789110429746883",
                "272974554951072346769050686958360192748",
                "221353396823458671248423707776387619733",
                "247030626515740661613789679638955472723",
                "110401573555248488579368945759952516066",
                "266682681299245287452014434713629678880",
                "28587892604432600954321114786460090923",
                "224531537563966048955792729741377695995"
            ]
        },
        "id": "CVE-2024-26983-d3270b2a"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "325527792105353865429254591216184515090",
                "61222898466788361585433952793081681645",
                "66874924429408153079145686339894927917",
                "291317985249204685954983017296106319494",
                "55212846518392774450888741232303356975",
                "29200382304164673267717306117259316933",
                "44063933118291608606741338346220070219",
                "223555562210940817552243850056128059016",
                "34888949334301617067408006215882895077",
                "280374727754205991984393911358054180942",
                "187395665454025113983253350050407994380",
                "81759420635810481259403652339345502144",
                "21549632843390073693264042718140022939",
                "275903806590130658965096747053235403784",
                "285751885052538115268388961412358015687",
                "228051936453359395154805409465080317388",
                "30852991469831967898432498480712427056",
                "193730986572570840666928492756320320296",
                "286578814117939360395346226894174770643",
                "49783370438792404306093244909458549586",
                "10435999745351380797902789110429746883",
                "272974554951072346769050686958360192748",
                "221353396823458671248423707776387619733",
                "247030626515740661613789679638955472723",
                "110401573555248488579368945759952516066",
                "266682681299245287452014434713629678880",
                "28587892604432600954321114786460090923",
                "224531537563966048955792729741377695995"
            ]
        },
        "id": "CVE-2024-26983-db2d1571"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "function": "xbc_init",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "327229837985875790870524859540221701460",
            "length": 1059.0
        },
        "id": "CVE-2024-26983-e9f04ae8"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e46d3be714ad9652480c6db129ab8125e2d20ab7",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "249043324392463159741821554798328017003",
            "length": 85.0
        },
        "id": "CVE-2024-26983-ea6adfda"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89f9a1e876b5a7ad884918c03a46831af202c8a0",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/bootconfig.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "100564265710934537184941233536251125202",
                "250448634874634421258881547265915036120",
                "99333521464973839793429846444999964918",
                "104110263643112386827017423649297912261"
            ]
        },
        "id": "CVE-2024-26983-eb40ad42"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e7feb31a18c197d63a5e606025ed63c762f8918",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "249043324392463159741821554798328017003",
            "length": 85.0
        },
        "id": "CVE-2024-26983-ef16bc44"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a7dfb8fcd3f29fc93161100179b27f24f3d5f35",
        "signature_version": "v1",
        "target": {
            "function": "xbc_free_mem",
            "file": "lib/bootconfig.c"
        },
        "digest": {
            "function_hash": "27873218432337956706185208633024670999",
            "length": 93.0
        },
        "id": "CVE-2024-26983-f806590c"
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.15.0

Fixed

6.1.88

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.29

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.8.8