CVE-2024-56613

Summary

CVE-2024-56613 is a vulnerability affecting the Linux kernel where a memory leak occurs due to an overwritten vma->numab_state in the sched/numa module. The issue is triggered by the hackbench program of LTP when multiple threads attempt to access a shared vma concurrently. This vulnerability can be consistently reproduced on three different servers with different core counts. The root cause is that multiple threads might enter the vma assignment during the same 'numa_scan_period', leading to vma->numab_state being overwritten. The solution involves using the cmpxchg atomic operation to ensure that only one thread performs the vma->numab_state assignment at a time.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.