CVE-2024-42094

Updated: 2024-09-13 03:33:38.800701

Description:

In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Not Vulnerable 2024-09-23 14:25:24
AlmaLinux 9.2 FIPS kernel 5.14.0 7.8 HIGH Not Vulnerable 2024-09-20 05:25:34
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-09-23 14:25:24
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2024-09-16 14:24:40
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2024-09-26 14:28:29
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2024-09-26 14:28:29
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2024-09-24 12:35:26
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-09-23 14:25:24
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2024-09-23 14:25:24
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-09-23 14:25:24
Total: 13