CVE-2024-42093

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-42093
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42093.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42093
Downstream
Related
Published
2024-07-29T17:39:29.470Z
Modified
2026-05-14T03:52:56.922695243Z
Summary
net/dpaa2: Avoid explicit cpumask var allocation on stack
Details

In the Linux kernel, the following vulnerability has been resolved:

net/dpaa2: Avoid explicit cpumask var allocation on stack

For CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow.

Instead, kernel code should always use *cpumaskvar API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIGCPUMASK_OFFSTACK.

Use *cpumask_var API(s) to address it.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42093.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
93ddf0b211a0a0367d01c9587169c16ed77b4b98
Fixed
b2262b3be27cee334a2fa175ae3afb53f38fb0b1
Fixed
763896ab62a672d728f5eb10ac90d98c607a8509
Fixed
a55afc0f5f20ba30970aaf7271929dc00eee5e7d
Fixed
48147337d7efdea6ad6e49f5b8eb894b95868ef0
Fixed
69f49527aea12c23b78fb3d0a421950bf44fb4e2
Fixed
5e4f25091e6d06e99a23f724c839a58a8776a527
Fixed
d33fe1714a44ff540629b149d8fab4ac6967585c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42093.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
5.4.279
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.221
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.162
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.97
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.37
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42093.json"