CVE-2024-26987Improper Locking in Linux

CWE-667Improper Locking13 documents10 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 1
Latest updateJul 26

Description

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled When I did hard offline test with hugetlb pages, below deadlock occurs: WARNING: possible circular locking dependency detected 6.8.0-11409-gf6cef5f8c37f #1 Not tainted bash/46904 is trying to acquire lock: ffffffffabe68910 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_dec+0x16/0x60 but task is already holding lock: ffffffffabf92ea8 (pcp_batch_high

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

NVDlinux/linux_kernel5.186.1.88+3
Debianlinux/linux_kernel< 6.1.90-1+2
CVEListV5linux/linuxa6b40850c442bf996e729e1d441d3dbc37cea1715ef7ba2799a3b5ed292b8f6407376e2c25ef002e+4

Also affects: Fedora 38, 39, 40

Patches

🔴Vulnerability Details

4
OSV
CVE-2024-26987: In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled When I di2024-05-01
GHSA
GHSA-vh5c-fh26-4h3r: In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled When I2024-05-01
CVEList
mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled2024-05-01
VulnCheck
Linux Kernel Improper Locking2024

📋Vendor Advisories

7
Ubuntu
Linux kernel vulnerabilities2024-07-26
Ubuntu
Linux kernel vulnerabilities2024-07-23
Ubuntu
Linux kernel vulnerabilities2024-07-16
Ubuntu
Linux kernel vulnerabilities2024-07-11
Microsoft
mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled2024-05-14

💬Community

1
Bugzilla
CVE-2024-26987 kernel: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled2024-05-01
CVE-2024-26987 — Improper Locking in Linux | cvebase