Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42093
HistoryJul 29, 2024 - 5:39 p.m.

CVE-2024-42093 net/dpaa2: Avoid explicit cpumask var allocation on stack

2024-07-2917:39:29
Linux
github.com
1
linux kernel
vulnerability resolved
stack overflow
cpumask var
allocation strategy

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net/dpaa2: Avoid explicit cpumask var allocation on stack

For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask
variable on stack is not recommended since it can cause potential stack
overflow.

Instead, kernel code should always use *cpumask_var API(s) to allocate
cpumask var in config-neutral way, leaving allocation strategy to
CONFIG_CPUMASK_OFFSTACK.

Use *cpumask_var API(s) to address it.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial