Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-47668

lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated node that might be used later. If we then use that node for a new non-root node, it'll still have a pointer to the old root instead of being zeroed - fix this by zeroing it in the cmpxchg failure path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ba20ba2e3743bac786dff777954c11930256075e to < 0f27f4f445390cb7f73d4209cb2bf32834dc53daaffected
  • ba20ba2e3743bac786dff777954c11930256075e to < 99418ec776a39609f50934720419e0b464ca2283affected
  • ba20ba2e3743bac786dff777954c11930256075e to < ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169affected
  • ba20ba2e3743bac786dff777954c11930256075e to < ebeff038744c498a036e7a92eb8e433ae0a386d7affected
  • ba20ba2e3743bac786dff777954c11930256075e to < d942e855324a60107025c116245095632476613eaffected
  • ba20ba2e3743bac786dff777954c11930256075e to < 0f078f8ca93b28a34e20bd050f12cd4efeee7c0faffected
  • ba20ba2e3743bac786dff777954c11930256075e to < b2f11c6f3e1fc60742673b8675c95b78447f3daeaffected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 5.4.284 to ≤ 5.4.*unaffected
  • 5.10.226 to ≤ 5.10.*unaffected
  • 5.15.167 to ≤ 5.15.*unaffected
  • 6.1.110 to ≤ 6.1.*unaffected
  • 6.6.51 to ≤ 6.6.*unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References