cbcvebase.
CVE-2024-56550
published 2024-12-27

CVE-2024-56550: In the Linux kernel, the following vulnerability has been resolved: s390/stacktrace: Use break instead of return statement arch_stack_walk_user_common()…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.6th percentile
In the Linux kernel, the following vulnerability has been resolved: s390/stacktrace: Use break instead of return statement arch_stack_walk_user_common() contains a return statement instead of a break statement in case store_ip() fails while trying to store a callchain entry of a user space process. This may lead to a missing pagefault_enable() call. If this happens any subsequent page fault of the process won't be resolved by the page fault handler and this in turn will lead to the process being killed. Use a break instead of a return statement to fix this.

Affected

11 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.5-1 (forky)linux 6.12.5-1 (forky)
linuxlinux
linuxlinux
linuxlinux>= 6.9.4 < 6.106.10
linuxlinux>= ebd912ff9919a10609511383d94942362234c077 < 20c26357826457dc7c8145297e60ddc012e1891420c26357826457dc7c8145297e60ddc012e18914
linuxlinux>= ebd912ff9919a10609511383d94942362234c077 < 588a9836a4ef7ec3bfcffda526dfa399637e6cfc588a9836a4ef7ec3bfcffda526dfa399637e6cfc
linuxlinux_kernel>= 0 < 6.12.5-16.12.5-1
linuxlinux_kernel>= 0 < 6.12.5-16.12.5-1
linuxlinux_kernel>= 0 < 6.8.0-58.606.8.0-58.60
linuxlinux_kernel>= 6.10 < 6.12.46.12.4
linuxlinux_kernel>= 6.9.4 < 6.106.10

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.