CVE-2024-40966
MEDIUM EPSS 20.5%
Published Jul 12, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual terminals to just N_TTY. They are kind of special, and in particular, the "con_write()" routine violates the "writes cannot sleep" rule that some ldiscs rely on. This avoids the BUG: sleeping function called from invalid context at kernel/printk/printk.c:2659 when N_GSM has been attached to a virtual console, and gsmld_write() calls con_write() while holding a spinlock, and con_write() then tries to get the console lock.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
20.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 3
References 5
- git.kernel.org https://git.kernel.org/stable/c/287b569a5b914903ba7c438a3c0dbc3410ebb409
- git.kernel.org https://git.kernel.org/stable/c/3c6332f3bb1578b5b10ac2561247b1d6272ae937
- git.kernel.org https://git.kernel.org/stable/c/5920ac19964f9e20181f63b410d9200ddbf8dc86
- git.kernel.org https://git.kernel.org/stable/c/6bd23e0c2bb6c65d4f5754d1456bc9a4427fc59b
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Remediation
- git.kernel.org https://git.kernel.org/stable/c/287b569a5b914903ba7c438a3c0dbc3410ebb409
- git.kernel.org https://git.kernel.org/stable/c/3c6332f3bb1578b5b10ac2561247b1d6272ae937
- git.kernel.org https://git.kernel.org/stable/c/5920ac19964f9e20181f63b410d9200ddbf8dc86
- git.kernel.org https://git.kernel.org/stable/c/6bd23e0c2bb6c65d4f5754d1456bc9a4427fc59b