CVE-2024-50002

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

static_call: Handle module init failure correctly in static_call_del_module()

Module insertion invokes static_call_add_module() to initialize the static

calls in a module. static_call_add_module() invokes __static_call_init(),

which allocates a struct static_call_mod to either encapsulate the built-in

static call sites of the associated key into it so further modules can be

added or to append the module to the module chain.

If that allocation fails the function returns with an error code and the

module core invokes static_call_del_module() to clean up eventually added

static_call_mod entries.

This works correctly, when all keys used by the module were converted over

to a module chain before the failure. If not then static_call_del_module()

causes a #GP as it blindly assumes that key::mods points to a valid struct

static_call_mod.

The problem is that key::mods is not a individual struct member of struct

static_call

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References