In the Linux kernel, the following vulnerability has been resolved:
net/dpaa2: Avoid explicit cpumask var allocation on stack
For CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow.
Instead, kernel code should always use *cpumaskvar API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIGCPUMASK_OFFSTACK.
Use *cpumask_var API(s) to address it.
[
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48147337d7efdea6ad6e49f5b8eb894b95868ef0",
"signature_version": "v1",
"id": "CVE-2024-42093-3e7f4caa"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e4f25091e6d06e99a23f724c839a58a8776a527",
"signature_version": "v1",
"id": "CVE-2024-42093-567d2751"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"8214537016349908503852641247052637528"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2262b3be27cee334a2fa175ae3afb53f38fb0b1",
"signature_version": "v1",
"id": "CVE-2024-42093-652576dd"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69f49527aea12c23b78fb3d0a421950bf44fb4e2",
"signature_version": "v1",
"id": "CVE-2024-42093-65480db9"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69f49527aea12c23b78fb3d0a421950bf44fb4e2",
"signature_version": "v1",
"id": "CVE-2024-42093-685e1d39"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a55afc0f5f20ba30970aaf7271929dc00eee5e7d",
"signature_version": "v1",
"id": "CVE-2024-42093-7a1ec428"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48147337d7efdea6ad6e49f5b8eb894b95868ef0",
"signature_version": "v1",
"id": "CVE-2024-42093-7aef601c"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a55afc0f5f20ba30970aaf7271929dc00eee5e7d",
"signature_version": "v1",
"id": "CVE-2024-42093-8527f2b1"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@763896ab62a672d728f5eb10ac90d98c607a8509",
"signature_version": "v1",
"id": "CVE-2024-42093-a8e8bbab"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d33fe1714a44ff540629b149d8fab4ac6967585c",
"signature_version": "v1",
"id": "CVE-2024-42093-ab8c0aee"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@763896ab62a672d728f5eb10ac90d98c607a8509",
"signature_version": "v1",
"id": "CVE-2024-42093-c6a417d3"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2262b3be27cee334a2fa175ae3afb53f38fb0b1",
"signature_version": "v1",
"id": "CVE-2024-42093-ceec5bc0"
},
{
"digest": {
"length": 467.0,
"function_hash": "213525366851490080727692314156206438117"
},
"target": {
"function": "update_xps",
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d33fe1714a44ff540629b149d8fab4ac6967585c",
"signature_version": "v1",
"id": "CVE-2024-42093-e3026753"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278470156440080735716977649866872201136",
"187769729322956863143979240309333209227",
"127627989691035721898545978344453595121",
"77318146613860435970705837910095638363",
"131449305664141019738160511783716264687",
"64870687967033998488398858895242228579",
"64675597179609340225323362677163051969",
"141146706643704902740452477962373016967",
"14877871923678048584344707146880968579",
"267085893391018976441592785252027617407",
"129415608457132113615865225684291351569",
"35718148043992479650083880257825816314",
"38033552329261750106978139140184758060",
"61558504574123135668724618707074242831",
"305714226879276338318603841314449228394",
"81028151529548134776053731437794246383",
"335262093353938068893257561734285562251",
"176743607181572952637596346436342976313"
]
},
"target": {
"file": "drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e4f25091e6d06e99a23f724c839a58a8776a527",
"signature_version": "v1",
"id": "CVE-2024-42093-f1895975"
}
]