CVE-2024-47668

MEDIUM EPSS 5.7%
Published Oct 9, 20241y ago · Modified Jun 17, 20262w ago
4.7 CVSS 3.1
Medium
Find Similar
Published Oct 9, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated node that might be used later. If we then use that node for a new non-root node, it'll still have a pointer to the old root instead of being zeroed - fix this by zeroing it in the cmpxchg failure path.

CVSS Details

Base Score
4.7
Exploitability
1.0
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-362

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel* <5.4.284
linuxlinux_kernel*≥5.5  –  <5.10.226
linuxlinux_kernel*≥5.11  –  <5.15.167
linuxlinux_kernel*≥5.16  –  <6.1.110
linuxlinux_kernel*≥6.2  –  <6.6.51
linuxlinux_kernel*≥6.7  –  <6.10.10
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any
linuxlinux_kernel6.11any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/0f078f8ca93b28a34e20bd050f12cd4efeee7c0f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0f27f4f445390cb7f73d4209cb2bf32834dc53da
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99418ec776a39609f50934720419e0b464ca2283
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b2f11c6f3e1fc60742673b8675c95b78447f3dae
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d942e855324a60107025c116245095632476613e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ebeff038744c498a036e7a92eb8e433ae0a386d7
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0f078f8ca93b28a34e20bd050f12cd4efeee7c0f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0f27f4f445390cb7f73d4209cb2bf32834dc53da
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99418ec776a39609f50934720419e0b464ca2283
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b2f11c6f3e1fc60742673b8675c95b78447f3dae
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d942e855324a60107025c116245095632476613e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ebeff038744c498a036e7a92eb8e433ae0a386d7
    Patch