Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-42094
HistoryJul 29, 2024 - 12:00 a.m.

CVE-2024-42094

2024-07-2900:00:00
ubuntu.com
ubuntu.com
3
linux kernel
net/iucv vulnerability
cpumask variable
stack overflow
config_cpumask_offstack
cpumask_var api
unix

AI Score

7

Confidence

High

EPSS

0

Percentile

5.0%

In the Linux kernel, the following vulnerability has been resolved:
net/iucv: Avoid explicit cpumask var allocation on stack
For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask
variable on stack is not recommended since it can cause potential stack
overflow.
Instead, kernel code should always use *cpumask_var API(s) to allocate
cpumask var in config-neutral way, leaving allocation strategy to
CONFIG_CPUMASK_OFFSTACK.
Use *cpumask_var API(s) to address it.

AI Score

7

Confidence

High

EPSS

0

Percentile

5.0%