CVE-2024-47668

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Oct 9, 2024
Updated: Oct 23, 2024
CWE ID 362

Summary

CVE-2024-47668 is a vulnerability identified in the Linux kernel. It affects the lib/generic-radix-tree.c file and involves a rare race condition in the function __genradix_ptr_alloc(). If a thread increases the tree depth and a new node needs to be allocated, but another thread beats it to the punch, the newly allocated node might still contain a pointer to the old root instead of being zeroed. This issue has been resolved by ensuring the new node's root pointer is zeroed in the cmpxchg failure path.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share