CVE-2024-49926
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-49926
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49926.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-49926
- Aliases
- Downstream
- Related
- Published
- 2024-10-21T18:01:50.405Z
- Modified
- 2026-01-06T15:13:46.299368Z
- Summary
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rcu-tasks: Fix access non-existent percpu rtpcp variable in rcutasksneed_gpcb()
For kernels built with CONFIGFORCENRCPUS=y, the nrcpuids is defined as NRCPUS instead of the number of possible cpus, this will cause the following system panic:
smpboot: Allowing 4 CPUs, 0 hotplug CPUs ... setuppercpu: NRCPUS:512 nrcpumaskbits:512 nrcpuids:512 nrnodeids:1 ... BUG: unable to handle page fault for address: ffffffff9911c8c8 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 0 PID: 15 Comm: rcutaskstrace Tainted: G W 6.6.21 #1 5dc7acf91a5e8e9ac9dcfc35bee0245691283ea6 RIP: 0010:rcutasksneedgpcb+0x25d/0x2c0 RSP: 0018:ffffa371c00a3e60 EFLAGS: 00010082 CR2: ffffffff9911c8c8 CR3: 000000040fa20005 CR4: 00000000001706f0 Call Trace: <TASK> ? _die+0x23/0x80 ? pagefaultoops+0xa4/0x180 ? excpagefault+0x152/0x180 ? asmexcpagefault+0x26/0x40 ? rcutasksneedgpcb+0x25d/0x2c0 ? _pfxrcutaskskthread+0x40/0x40 rcutasksonegp+0x69/0x180 rcutaskskthread+0x94/0xc0 kthread+0xe8/0x140 ? _pfxkthread+0x40/0x40 retfromfork+0x34/0x80 ? _pfxkthread+0x40/0x40 retfromforkasm+0x1b/0x80 </TASK>
Considering that there may be holes in the CPU numbers, use the maximum possible cpu number, instead of nrcpuids, for configuring enqueue and dequeue limits.
[ neeraj.upadhyay: Fix htmldocs build error reported by Stephen Rothwell ]
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49926.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/05095271a4fb0f6497121a057f9a2edf386d5d96
- https://git.kernel.org/stable/c/3104bddc666ff64b90491868bbc4c7ebdd90aedf
- https://git.kernel.org/stable/c/b3b2431ed27f4ebc28e26cdf005c1de42dc60bdf
- https://git.kernel.org/stable/c/fd70e9f1d85f5323096ad313ba73f5fe3d15ea41
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49926.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-49926
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8610b65680390a103b58f46282a1b05f7eebbba4Fixedb3b2431ed27f4ebc28e26cdf005c1de42dc60bdfFixed3104bddc666ff64b90491868bbc4c7ebdd90aedfFixed05095271a4fb0f6497121a057f9a2edf386d5d96Fixedfd70e9f1d85f5323096ad313ba73f5fe3d15ea41