CVE-2024-56768

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 6, 2025
Updated: Jan 7, 2025

Summary

CVE-2024-56768 is a vulnerability affecting the Linux kernel. In systems without SMP (Symmetric Multi-Processing) configuration, calling the function bpf_get_smp_processor_id() can lead to a kernel panic, causing a #PF (Page Fault) error due to unavailability of pcpu_hot. This issue arises from the fact that the function checks for the SMP configuration before accessing pcpu_hot. To mitigate this, the vulnerability has been addressed by inlining a return 0 in the !CONFIG_SMP case. This modification aims to prevent the kernel panic caused by the unavailability of pcpu_hot when bpf_get_smp_processor_id() is called in non-SMP configurations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share