Wind River Support Network

HomeDefectsLIN1024-2743
Fixed

LIN1024-2743 : Security Advisory - linux - CVE-2024-40944

Created: Jul 13, 2024    Updated: Aug 28, 2024
Resolved Date: Jul 14, 2024
Found In Version: 10.24.33.1
Fix Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix bug with call depth tracking

The call to cc_platform_has() triggers a fault and system crash if call depth
tracking is active because the GS segment has been reset by load_segments() and
GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate.

Call cc_platform_has() earlier in the function when GS is still valid.

   bp: Massage. ]

CREATE(Triage):(User=admin) [CVE-2024-40944 (https://nvd.nist.gov/vuln/detail/CVE-2024-40944)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube