CVE-2024-39508

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-39508
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-39508.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-39508
Downstream
Related
Published
2024-07-12T12:20:39.607Z
Modified
2025-11-15T23:31:10.992148Z
Summary
io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
Details

In the Linux kernel, the following vulnerability has been resolved:

iouring/io-wq: Use setbit() and test_bit() at worker->flags

Utilize setbit() and testbit() on worker->flags within io_uring/io-wq to address potential data races.

The structure ioworker->flags may be accessed through various data paths, leading to concurrency issues. When KCSAN is enabled, it reveals data races occurring in ioworkerhandlework and iowqactivatefreeworker functions.

 BUG: KCSAN: data-race in io_worker_handle_work / io_wq_activate_free_worker
 write to 0xffff8885c4246404 of 4 bytes by task 49071 on cpu 28:
 io_worker_handle_work (io_uring/io-wq.c:434 io_uring/io-wq.c:569)
 io_wq_worker (io_uring/io-wq.c:?)

<snip>

 read to 0xffff8885c4246404 of 4 bytes by task 49024 on cpu 5:
 io_wq_activate_free_worker (io_uring/io-wq.c:? io_uring/io-wq.c:285)
 io_wq_enqueue (io_uring/io-wq.c:947)
 io_queue_iowq (io_uring/io_uring.c:524)
 io_req_task_submit (io_uring/io_uring.c:1511)
 io_handle_tw_list (io_uring/io_uring.c:1198)

<snip>

Line numbers against commit 18daea77cca6 ("Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm").

These races involve writes and reads to the same memory location by different tasks running on different CPUs. To mitigate this, refactor the code to use atomic operations such as setbit(), testbit(), and clear_bit() instead of basic "and" and "or" operations. This ensures thread-safe manipulation of worker flags.

Also, move create_index to avoid holes in the structure.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b188cc1bb857a9d4701ae59aa7768b5124e262e
Fixed
ab702c3483db9046bab9f40306f1a28b22dbbdc0
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b188cc1bb857a9d4701ae59aa7768b5124e262e
Fixed
1cbb0affb15470a9621267fe0a8568007553a4bf
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b188cc1bb857a9d4701ae59aa7768b5124e262e
Fixed
8a565304927fbd28c9f028c492b5c1714002cbab

Affected versions

v5.*

v5.0
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "136394663678397634155209862535421318118",
            "length": 241.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "__io_worker_busy"
        },
        "id": "CVE-2024-39508-042a0e3e",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "38689795226496298337753709906511013706",
            "length": 393.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_dec_running"
        },
        "id": "CVE-2024-39508-050c2a73",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "38689795226496298337753709906511013706",
            "length": 393.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_dec_running"
        },
        "id": "CVE-2024-39508-0dc323b5",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "line_hashes": [
                "83560745127964808827326041434964826461",
                "219731488719266497391824225037153855875",
                "82454857502573157080077620485200433869",
                "158306993901012121852789785578421858684",
                "47935985860086753400694934149815014418",
                "182603809724086206094070722389977218389",
                "171392563895149271300194539383500347246",
                "310757415266972158488985925715617750730",
                "233696677772424814322326337515878050325",
                "37082624273690191537588427117909708622",
                "208926805611283259024145601576873508336",
                "45771388677011969491409374780831228523",
                "263834559492815016579954920758449345078",
                "266588189664082639550406952635496042693",
                "225965177764829838985170387986601116320",
                "166818572900683082137017982583889753466",
                "206664301122271662754308982596724466223",
                "142874570879390542617161211569132820869",
                "259068063814361809949043244802739898703",
                "169967912987381119321627116004689080400",
                "1131193355168059976770866173823934080",
                "196246505563488698566908366323221655807",
                "151268329653128243676622949351819856171",
                "122382563993746885467305307099426196233",
                "71183580569487219408724943748776992714",
                "3052926035013967270756134341652862181",
                "93237864985259397279431570683043859261",
                "3814297757903137277998470705543463737",
                "99896758761389325275026983218253729604",
                "154590283455154617396929005453874668418",
                "200486348740472977369461480783741706671",
                "95293077088815423641415408844551290356",
                "65201444843906571590897899127469595055",
                "267600510282206114531368575316821395623",
                "115255104503725471782846474272108308373",
                "108689399851482050332224696644037466961",
                "220084757849372173773894047730209510334",
                "339870400600146413415355706623134832192",
                "127265068434185605782180701594384475056",
                "304716161094637316965898202168841712913",
                "233005251938277129186005805975468739124",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "53995348272647775618169057058906710242",
                "107285489247996220508409653070580474717",
                "241910840057302341605811194211905223322",
                "152413114531238928104231389351588781840",
                "131211557956788921116144546537155821466",
                "304757907257306775844443218727864535206",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "252763859860191311554662312620496498209",
                "206670304429671338566151325411428869123",
                "27730644884251561620003268440914497108",
                "37889003000839837939132157445366110086",
                "317930380649198635469901101462908803795",
                "100483046935350726767730767454785437850",
                "186234892542462446440342817288995977151",
                "138728424755417838779672602758537664228",
                "313475879429092062105245363600925183825",
                "186720194291346911452374380237157204285",
                "310686069621693750147637592652325527286",
                "177852584184235504558275172612008727365",
                "261841797369661110052292742569309199262",
                "92518257699200917923248134400837798685",
                "216602579948494698155528844189853679841",
                "115232949953288043573230606583913026410",
                "309894506751429715124947323993690142191",
                "42421447159480732046090323042099570315",
                "40154089534236679419511755271122695268",
                "91410421941393222009784283535755957672"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c"
        },
        "id": "CVE-2024-39508-0f7f6df9",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "21452442085413161947482358786773521000",
            "length": 123.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_get_acct"
        },
        "id": "CVE-2024-39508-1336f827",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "208220269445597987093478847256007384152",
            "length": 548.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_worker_exit"
        },
        "id": "CVE-2024-39508-1b99cac8",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "288446281372766424380164209901732474060",
            "length": 1118.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker"
        },
        "id": "CVE-2024-39508-1ba476eb",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "line_hashes": [
                "83560745127964808827326041434964826461",
                "219731488719266497391824225037153855875",
                "82454857502573157080077620485200433869",
                "158306993901012121852789785578421858684",
                "47935985860086753400694934149815014418",
                "182603809724086206094070722389977218389",
                "171392563895149271300194539383500347246",
                "310757415266972158488985925715617750730",
                "233696677772424814322326337515878050325",
                "37082624273690191537588427117909708622",
                "208926805611283259024145601576873508336",
                "45771388677011969491409374780831228523",
                "263834559492815016579954920758449345078",
                "266588189664082639550406952635496042693",
                "225965177764829838985170387986601116320",
                "166818572900683082137017982583889753466",
                "206664301122271662754308982596724466223",
                "142874570879390542617161211569132820869",
                "259068063814361809949043244802739898703",
                "169967912987381119321627116004689080400",
                "1131193355168059976770866173823934080",
                "196246505563488698566908366323221655807",
                "151268329653128243676622949351819856171",
                "122382563993746885467305307099426196233",
                "71183580569487219408724943748776992714",
                "3052926035013967270756134341652862181",
                "93237864985259397279431570683043859261",
                "3814297757903137277998470705543463737",
                "99896758761389325275026983218253729604",
                "154590283455154617396929005453874668418",
                "200486348740472977369461480783741706671",
                "95293077088815423641415408844551290356",
                "65201444843906571590897899127469595055",
                "267600510282206114531368575316821395623",
                "115255104503725471782846474272108308373",
                "108689399851482050332224696644037466961",
                "220084757849372173773894047730209510334",
                "339870400600146413415355706623134832192",
                "127265068434185605782180701594384475056",
                "304716161094637316965898202168841712913",
                "233005251938277129186005805975468739124",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "53995348272647775618169057058906710242",
                "107285489247996220508409653070580474717",
                "241910840057302341605811194211905223322",
                "152413114531238928104231389351588781840",
                "131211557956788921116144546537155821466",
                "304757907257306775844443218727864535206",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "252763859860191311554662312620496498209",
                "206670304429671338566151325411428869123",
                "27730644884251561620003268440914497108",
                "37889003000839837939132157445366110086",
                "317930380649198635469901101462908803795",
                "100483046935350726767730767454785437850",
                "186234892542462446440342817288995977151",
                "138728424755417838779672602758537664228",
                "313475879429092062105245363600925183825",
                "186720194291346911452374380237157204285",
                "310686069621693750147637592652325527286",
                "177852584184235504558275172612008727365",
                "261841797369661110052292742569309199262",
                "92518257699200917923248134400837798685",
                "216602579948494698155528844189853679841",
                "115232949953288043573230606583913026410",
                "309894506751429715124947323993690142191",
                "42421447159480732046090323042099570315",
                "40154089534236679419511755271122695268",
                "91410421941393222009784283535755957672"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c"
        },
        "id": "CVE-2024-39508-4067cb54",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "62426176360332389052613423741883458714",
            "length": 871.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "create_io_worker"
        },
        "id": "CVE-2024-39508-44177417",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "line_hashes": [
                "83560745127964808827326041434964826461",
                "219731488719266497391824225037153855875",
                "82454857502573157080077620485200433869",
                "158306993901012121852789785578421858684",
                "47935985860086753400694934149815014418",
                "182603809724086206094070722389977218389",
                "171392563895149271300194539383500347246",
                "310757415266972158488985925715617750730",
                "233696677772424814322326337515878050325",
                "37082624273690191537588427117909708622",
                "208926805611283259024145601576873508336",
                "45771388677011969491409374780831228523",
                "263834559492815016579954920758449345078",
                "266588189664082639550406952635496042693",
                "225965177764829838985170387986601116320",
                "166818572900683082137017982583889753466",
                "206664301122271662754308982596724466223",
                "142874570879390542617161211569132820869",
                "259068063814361809949043244802739898703",
                "169967912987381119321627116004689080400",
                "1131193355168059976770866173823934080",
                "196246505563488698566908366323221655807",
                "151268329653128243676622949351819856171",
                "122382563993746885467305307099426196233",
                "71183580569487219408724943748776992714",
                "3052926035013967270756134341652862181",
                "93237864985259397279431570683043859261",
                "3814297757903137277998470705543463737",
                "99896758761389325275026983218253729604",
                "154590283455154617396929005453874668418",
                "200486348740472977369461480783741706671",
                "95293077088815423641415408844551290356",
                "65201444843906571590897899127469595055",
                "267600510282206114531368575316821395623",
                "115255104503725471782846474272108308373",
                "108689399851482050332224696644037466961",
                "220084757849372173773894047730209510334",
                "339870400600146413415355706623134832192",
                "127265068434185605782180701594384475056",
                "304716161094637316965898202168841712913",
                "233005251938277129186005805975468739124",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "53995348272647775618169057058906710242",
                "107285489247996220508409653070580474717",
                "241910840057302341605811194211905223322",
                "152413114531238928104231389351588781840",
                "131211557956788921116144546537155821466",
                "304757907257306775844443218727864535206",
                "214493233526575605482909676965851907430",
                "136949235874125724734150555441401753541",
                "252763859860191311554662312620496498209",
                "206670304429671338566151325411428869123",
                "27730644884251561620003268440914497108",
                "37889003000839837939132157445366110086",
                "317930380649198635469901101462908803795",
                "100483046935350726767730767454785437850",
                "186234892542462446440342817288995977151",
                "138728424755417838779672602758537664228",
                "313475879429092062105245363600925183825",
                "186720194291346911452374380237157204285",
                "310686069621693750147637592652325527286",
                "177852584184235504558275172612008727365",
                "261841797369661110052292742569309199262",
                "92518257699200917923248134400837798685",
                "216602579948494698155528844189853679841",
                "115232949953288043573230606583913026410",
                "309894506751429715124947323993690142191",
                "42421447159480732046090323042099570315",
                "40154089534236679419511755271122695268",
                "91410421941393222009784283535755957672"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c"
        },
        "id": "CVE-2024-39508-475cfef4",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "208220269445597987093478847256007384152",
            "length": 548.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_worker_exit"
        },
        "id": "CVE-2024-39508-47b886e0",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "209408798478637511693839544105393019234",
            "length": 918.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_enqueue"
        },
        "id": "CVE-2024-39508-4df45c1f",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "145407770488646410119064020472478097967",
            "length": 258.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_running"
        },
        "id": "CVE-2024-39508-52ecc875",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "38689795226496298337753709906511013706",
            "length": 393.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_dec_running"
        },
        "id": "CVE-2024-39508-55044a4b",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "208220269445597987093478847256007384152",
            "length": 548.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_worker_exit"
        },
        "id": "CVE-2024-39508-56dddaee",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "21452442085413161947482358786773521000",
            "length": 123.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_get_acct"
        },
        "id": "CVE-2024-39508-5aa99a72",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "47313372506792566503373096174604712981",
            "length": 265.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_sleeping"
        },
        "id": "CVE-2024-39508-5fc82add",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "145407770488646410119064020472478097967",
            "length": 258.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_running"
        },
        "id": "CVE-2024-39508-65509443",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "136394663678397634155209862535421318118",
            "length": 241.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "__io_worker_busy"
        },
        "id": "CVE-2024-39508-6d8900bd",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "62426176360332389052613423741883458714",
            "length": 871.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "create_io_worker"
        },
        "id": "CVE-2024-39508-6f3b6c23",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "21452442085413161947482358786773521000",
            "length": 123.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_get_acct"
        },
        "id": "CVE-2024-39508-a66a773d",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "145407770488646410119064020472478097967",
            "length": 258.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_running"
        },
        "id": "CVE-2024-39508-bd0e5270",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "288446281372766424380164209901732474060",
            "length": 1118.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker"
        },
        "id": "CVE-2024-39508-c720bbed",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "209408798478637511693839544105393019234",
            "length": 918.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_enqueue"
        },
        "id": "CVE-2024-39508-c9eeac83",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "47313372506792566503373096174604712981",
            "length": 265.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_sleeping"
        },
        "id": "CVE-2024-39508-d06ef815",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "288446281372766424380164209901732474060",
            "length": 1118.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker"
        },
        "id": "CVE-2024-39508-dbb5d76f",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "209408798478637511693839544105393019234",
            "length": 918.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_enqueue"
        },
        "id": "CVE-2024-39508-df0c52d0",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "221977645479161012377616646145890051935",
            "length": 411.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_init_new_worker"
        },
        "id": "CVE-2024-39508-e148e6d2",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "62426176360332389052613423741883458714",
            "length": 871.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab702c3483db9046bab9f40306f1a28b22dbbdc0",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "create_io_worker"
        },
        "id": "CVE-2024-39508-e60b8a2e",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "221977645479161012377616646145890051935",
            "length": 411.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb0affb15470a9621267fe0a8568007553a4bf",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_init_new_worker"
        },
        "id": "CVE-2024-39508-e994c9d3",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "221977645479161012377616646145890051935",
            "length": 411.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_init_new_worker"
        },
        "id": "CVE-2024-39508-ecf455e8",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "47313372506792566503373096174604712981",
            "length": 265.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "io_wq_worker_sleeping"
        },
        "id": "CVE-2024-39508-ef528f83",
        "signature_type": "Function",
        "signature_version": "v1"
    },
    {
        "digest": {
            "function_hash": "136394663678397634155209862535421318118",
            "length": 241.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a565304927fbd28c9f028c492b5c1714002cbab",
        "target": {
            "file": "io_uring/io-wq.c",
            "function": "__io_worker_busy"
        },
        "id": "CVE-2024-39508-fc866d1c",
        "signature_type": "Function",
        "signature_version": "v1"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.1.0
Fixed
6.6.35
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.6