Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-40944

x86/kexec: Fix bug with call depth tracking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by load_segments() and GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate. Call cc_platform_has() earlier in the function when GS is still valid. [ bp: Massage. ]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5d8213864ade86b48fc492584ea86d65a62f892e to < d91ddd05082691e69b30744825d18ae799293258affected
  • 5d8213864ade86b48fc492584ea86d65a62f892e to < 2cfb464669b645a9b98478b74f2bcea9860dcff1affected
  • 5d8213864ade86b48fc492584ea86d65a62f892e to < 93c1800b3799f17375989b0daf76497dd3e80922affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.35 to ≤ 6.6.*unaffected
  • 6.9.6 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References