CVE-2024-56768
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-56768 is a vulnerability affecting the Linux kernel. In systems without SMP (Symmetric Multi-Processing) configuration, calling the function bpf_get_smp_processor_id() can lead to a kernel panic, causing a #PF (Page Fault) error due to unavailability of pcpu_hot. This issue arises from the fact that the function checks for the SMP configuration before accessing pcpu_hot. To mitigate this, the vulnerability has been addressed by inlining a return 0 in the !CONFIG_SMP case. This modification aims to prevent the kernel panic caused by the unavailability of pcpu_hot when bpf_get_smp_processor_id() is called in non-SMP configurations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX