CVE-2024-49935

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: PAD: fix crash in exit_round_robin()

The kernel occasionally crashes in cpumask_clear_cpu(), which is called

within exit_round_robin(), because when executing clear_bit(nr, addr) with

nr set to 0xffffffff, the address calculation may cause misalignment within

the memory, leading to access to an invalid memory address.

----------

BUG: unable to handle kernel paging request at ffffffffe0740618

...

CPU: 3 PID: 2919323 Comm: acpi_pad/14 Kdump: loaded Tainted: G OE X --------- - - 4.18.0-425.19.2.el8_7.x86_64 #1

...

RIP: 0010:power_saving_thread+0x313/0x411 [acpi_pad]

Code: 89 cd 48 89 d3 eb d1 48 c7 c7 55 70 72 c0 e8 64 86 b0 e4 c6 05 0d a1 02 00 01 e9 bc fd ff ff 45 89 e4 42 8b 04 a5 20 82 72 c0 <f0> 48 0f b3 05 f4 9c 01 00 42 c7 04 a5 20 82 72 c0 ff ff ff ff 31

RSP: 0018:ff72a5d51fa77ec8 EFLAGS: 00010202

RAX: 00000000ffffffff RBX: ff462981e5d8cb80 RCX: 0000000000000000

RDX: 0000000000

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References