CVE-2024-58042

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 27, 2025
Updated: Mar 5, 2025
CWE ID 667

Summary

CVE-2024-58042: A vulnerability in the Linux kernel's rhashtable has been addressed. The issue involved a potential deadlock between the rhashtable bucket, rq lock, and dsq lock, which could trigger a lockdep warning. This was due to a circular locking dependency that has been resolved by moving the hash table growth check and work scheduling outside the rht lock. This change enhances the flexibility of rhashtable by eliminating restrictive locking and allows its use in scheduler and workqueue contexts more effectively. Additionally, atomic_inc is also moved outside of the bucket lock along with the growth above 75% check.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share