CVE-2024-31076: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

Published Jun 21, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next instance of the interrupt being triggered on the original CPU.

When the interrupt next triggers on the original CPU, the new affinity is enforced within irqmoveirq(). A vector is allocated from the new CPU, but the old vector on the original CPU remains and is not immediately reclaimed. Instead, apicd->moveinprogress is flagged, and the reclaiming process is delayed until the next trigger of the interrupt on the new CPU.

Upon the subsequent triggering of the interrupt on the new CPU, irqcompletemove() adds a task to the old CPU's vectorcleanup list if it remains online. Subsequently, the timer on the old CPU iterates over its vectorcleanup list, reclaiming old vectors.

However, a rare scenario arises if the old CPU is outgoing before the interrupt triggers again on the new CPU.

In that case irqforcecompletemove() is not invoked on the outgoing CPU to reclaim the old apicd->prevvector because the interrupt isn't currently affine to the outgoing CPU, and irqneedsfixup() returns false. Even though vectorschedulecleanup() is later called on the new CPU, it doesn't reclaim apicd->prevvector; instead, it simply resets both apicd->moveinprogress and apicd->prevvector to 0.

As a result, the vector remains unreclaimed in vectormatrix, leading to a CPU vector leak.

To address this issue, move the invocation of irqforcecompletemove() before the irqneedsfixup() call to reclaim apicd->prevvector, if the interrupt is currently or used to be affine to the outgoing CPU.

Additionally, reclaim the vector in vectorschedulecleanup() as well, following a warning message, although theoretically it should never see apicd->moveinprogress with apicd->prevcpu pointing to an offline CPU.

Other sources

In the Linux kernel, the following vulnerability has been resolved:

genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

The Linux kernel CVE team has assigned CVE-2024-31076 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024062134-CVE-2024-31076-786e@gregkh/T

— Red Hat

Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by a vector leak during CPU offline. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service condition.

— IBM

Affected Software

217 affected componentsFixes available
redhat/kernel<4.19.316
4.19.316
redhat/kernel<5.4.278
5.4.278
redhat/kernel<5.10.219
5.10.219
redhat/kernel<5.15.161
5.15.161
redhat/kernel<6.1.93
6.1.93
redhat/kernel<6.6.33
6.6.33
redhat/kernel<6.9.4
6.9.4
redhat/kernel<6.10
6.10
IBM Security Verify Governance<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2
IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2
Linux Linux kernel>=4.13<4.19.316
Linux Linux kernel>=4.20<5.4.278
Linux Linux kernel>=5.5<5.10.219
Linux Linux kernel>=5.11<5.15.161
Linux Linux kernel>=5.16<6.1.93
Linux Linux kernel>=6.2<6.6.33
Linux Linux kernel>=6.7<6.9.4
linux/kernel>=4.13.0<4.19.316
4.19.316
linux/kernel>=4.20.0<5.4.278
5.4.278
linux/kernel>=5.5.0<5.10.219
5.10.219
linux/kernel>=5.11.0<5.15.161
5.15.161
linux/kernel>=5.16.0<6.1.93
6.1.93
linux/kernel>=6.2.0<6.6.33
6.6.33
linux/kernel>=6.7.0<6.9.4
6.9.4
debian/linux<6.1.94-1
6.1.94-1
debian/linux<6.9.7-1
6.9.7-1
debian/linux<6.9.7-1
6.9.7-1
ubuntu/linux-azure<4.15.0-1182.197~14.04.1
4.15.0-1182.197~14.04.1
ubuntu/linux-aws-hwe<4.15.0-1174.187~16.04.1
4.15.0-1174.187~16.04.1
ubuntu/linux-azure<4.15.0-1182.197~16.04.1
4.15.0-1182.197~16.04.1
ubuntu/linux-gcp<4.15.0-1167.184~16.04.2
4.15.0-1167.184~16.04.2
ubuntu/linux-hwe<4.15.0-230.242~16.04.1
4.15.0-230.242~16.04.1
ubuntu/linux-oracle<4.15.0-1136.147~16.04.1
4.15.0-1136.147~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux<4.15.0-230.242
4.15.0-230.242
ubuntu/linux-aws<4.15.0-1174.187
4.15.0-1174.187
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1130.140~18.04.1
5.4.0-1130.140~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1182.197
4.15.0-1182.197
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1135.142~18.04.1
5.4.0-1135.142~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1167.184
4.15.0-1167.184
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1134.143~18.04.1
5.4.0-1134.143~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-192.212~18.04.1
5.4.0-192.212~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1077.82~18.04.1
5.4.0-1077.82~18.04.1
ubuntu/linux-kvm<4.15.0-1157.162
4.15.0-1157.162
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1136.147
4.15.0-1136.147
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1129.138~18.04.1
5.4.0-1129.138~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1114.126~18.04.1
5.4.0-1114.126~18.04.1
ubuntu/linux-aws-fips<4.15.0-2112.118
4.15.0-2112.118
ubuntu/linux-azure-fips<4.15.0-2091.97
4.15.0-2091.97
ubuntu/linux-fips<4.15.0-1128.139
4.15.0-1128.139
ubuntu/linux-gcp-fips<4.15.0-2075.80
4.15.0-2075.80
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-192.212
5.4.0-192.212
ubuntu/linux-aws<5.4.0-1130.140
5.4.0-1130.140
ubuntu/linux-aws-5.15<5.15.0-1069.75~20.04.1
5.15.0-1069.75~20.04.1
ubuntu/linux-azure<5.4.0-1135.142
5.4.0-1135.142
ubuntu/linux-azure-5.15<5.15.0-1072.81~20.04.1
5.15.0-1072.81~20.04.1
ubuntu/linux-bluefield<5.4.0-1090.97
5.4.0-1090.97
ubuntu/linux-gcp<5.4.0-1134.143
5.4.0-1134.143
ubuntu/linux-gcp-5.15<5.15.0-1068.76~20.04.1
5.15.0-1068.76~20.04.1
ubuntu/linux-gkeop<5.4.0-1097.101
5.4.0-1097.101
ubuntu/linux-gkeop-5.15<5.15.0-1052.59~20.04.1
5.15.0-1052.59~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-121.131~20.04.1
5.15.0-121.131~20.04.1
ubuntu/linux-ibm<5.4.0-1077.82
5.4.0-1077.82
ubuntu/linux-ibm-5.15<5.15.0-1062.65~20.04.1
5.15.0-1062.65~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1064.70~20.04.1
5.15.0-1064.70~20.04.1
ubuntu/linux-iot<5.4.0-1042.43
5.4.0-1042.43
ubuntu/linux-kvm<5.4.0-1118.125
5.4.0-1118.125
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-121.131~20.04.1
5.15.0-121.131~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1030.30~20.04.1
5.15.0-1030.30~20.04.1
ubuntu/linux-oracle<5.4.0-1129.138
5.4.0-1129.138
ubuntu/linux-oracle-5.15<5.15.0-1067.73~20.04.1
5.15.0-1067.73~20.04.1
ubuntu/linux-raspi<5.4.0-1114.126
5.4.0-1114.126
ubuntu/linux-riscv-5.15<5.15.0-1065.69~20.04.1
5.15.0-1065.69~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1049.53
5.4.0-1049.53
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1130.140+fips1
5.4.0-1130.140+fips1
ubuntu/linux-azure-fips<5.4.0-1135.142+fips1
5.4.0-1135.142+fips1
ubuntu/linux-fips<5.4.0-1104.114
5.4.0-1104.114
ubuntu/linux-gcp-fips<5.4.0-1134.143+fips1
5.4.0-1134.143+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-121.131
5.15.0-121.131
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1069.75
5.15.0-1069.75
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5*
ubuntu/linux-aws-6.8<6.8.0-1015.16~22.04.1
6.8.0-1015.16~22.04.1
ubuntu/linux-azure<5.15.0-1072.81
5.15.0-1072.81
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5*
ubuntu/linux-azure-6.8<6.8.0-1014.16~22.04.1
6.8.0-1014.16~22.04.1
ubuntu/linux-azure-fde<5.15.0-1072.81.1
5.15.0-1072.81.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-gcp<5.15.0-1068.76
5.15.0-1068.76
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5*
ubuntu/linux-gcp-6.8<6.8.0-1014.16~22.04.1
6.8.0-1014.16~22.04.1
ubuntu/linux-gke<5.15.0-1066.72
5.15.0-1066.72
ubuntu/linux-gkeop<5.15.0-1052.59
5.15.0-1052.59
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5*
ubuntu/linux-hwe-6.8<6.8.0-45.45~22.04.1
6.8.0-45.45~22.04.1
ubuntu/linux-ibm<5.15.0-1062.65
5.15.0-1062.65
ubuntu/linux-ibm-6.8<6.8.0-1012.12~22.04.1
6.8.0-1012.12~22.04.1
ubuntu/linux-intel-iotg<5.15.0-1064.70
5.15.0-1064.70
ubuntu/linux-kvm<5.15.0-1066.71
5.15.0-1066.71
ubuntu/linux-lowlatency<5.15.0-121.131
5.15.0-121.131
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5*
ubuntu/linux-lowlatency-hwe-6.8<6.8.0-44.44.1~22.04.1
6.8.0-44.44.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1064.65
5.15.0-1064.65
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5*
ubuntu/linux-nvidia-6.8<6.8.0-1013.14~22.04.1
6.8.0-1013.14~22.04.1
ubuntu/linux-nvidia-tegra<5.15.0-1028.28
5.15.0-1028.28
ubuntu/linux-nvidia-tegra-igx<5.15.0-1016.16
5.15.0-1016.16
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1*
ubuntu/linux-oem-6.5*
ubuntu/linux-oracle<5.15.0-1067.73
5.15.0-1067.73
ubuntu/linux-oracle-6.5*
ubuntu/linux-oracle-6.8<6.8.0-1012.12~22.04.1
6.8.0-1012.12~22.04.1
ubuntu/linux-raspi<5.15.0-1062.65
5.15.0-1062.65
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5*
ubuntu/linux-riscv-6.8<6.8.0-44.44.1~22.04.1
6.8.0-44.44.1~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5*
ubuntu/linux-xilinx-zynqmp<5.15.0-1035.39
5.15.0-1035.39
ubuntu/linux-bluefield<5.15.0-1052.54
5.15.0-1052.54
ubuntu/linux-intel-iot-realtime<5.15.0-1063.65
5.15.0-1063.65
ubuntu/linux-realtime<5.15.0-1070.78
5.15.0-1070.78
ubuntu/linux-realtime-6.8<6.8.1-1008.8~22.04.1
6.8.1-1008.8~22.04.1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1069.75+fips1
5.15.0-1069.75+fips1
ubuntu/linux-azure-fips<5.15.0-1072.81+fips1
5.15.0-1072.81+fips1
ubuntu/linux-fips<5.15.0-121.131+fips1
5.15.0-121.131+fips1
ubuntu/linux-gcp-fips<5.15.0-1068.76+fips1
5.15.0-1068.76+fips1
ubuntu/linux<6.8.0-44.44
6.8.0-44.44
ubuntu/linux-aws<6.8.0-1015.16
6.8.0-1015.16
ubuntu/linux-azure<6.8.0-1014.16
6.8.0-1014.16
ubuntu/linux-gcp<6.8.0-1014.16
6.8.0-1014.16
ubuntu/linux-gke<6.8.0-1010.13
6.8.0-1010.13
ubuntu/linux-ibm<6.8.0-1012.12
6.8.0-1012.12
ubuntu/linux-lowlatency<6.8.0-44.44.1
6.8.0-44.44.1
ubuntu/linux-nvidia<6.8.0-1013.14
6.8.0-1013.14
ubuntu/linux-nvidia-lowlatency<6.8.0-1013.14.1
6.8.0-1013.14.1
ubuntu/linux-oem-6.8<6.8.0-1012.12
6.8.0-1012.12
ubuntu/linux-oracle<6.8.0-1012.12
6.8.0-1012.12
ubuntu/linux-raspi<6.8.0-1011.12
6.8.0-1011.12
ubuntu/linux-riscv<6.8.0-44.44.1
6.8.0-44.44.1
ubuntu/linux-raspi-realtime<6.8.0-2010.10
6.8.0-2010.10
ubuntu/linux-realtime<6.8.1-1008.8
6.8.1-1008.8
ubuntu/linux-fips<6.8.0-78.78+fips1
6.8.0-78.78+fips1
ubuntu/linux-vmware*
debian/linux
6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 4.19.316
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 5.4.278
  3. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 5.10.219
  4. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 5.15.161
  5. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.1.93
  6. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.6.33
  7. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.9.4
  8. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.10
  9. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 4.19.316
  10. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 5.4.278
  11. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 5.10.219
  12. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 5.15.161
  13. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.1.93
  14. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.6.33
  15. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.9.4
  16. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.94-1
  17. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.9.7-1
  18. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1182.197~14.04.1
  19. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1174.187~16.04.1
  20. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1182.197~16.04.1
  21. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1167.184~16.04.2
  22. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-230.242~16.04.1
  23. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1136.147~16.04.1
  24. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-230.242
  25. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1174.187
  26. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1130.140~18.04.1
  27. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1182.197
  28. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.142~18.04.1
  29. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1167.184
  30. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143~18.04.1
  31. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-192.212~18.04.1
  32. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1077.82~18.04.1
  33. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1157.162
  34. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1136.147
  35. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1129.138~18.04.1
  36. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1114.126~18.04.1
  37. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2112.118
  38. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2091.97
  39. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1128.139
  40. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2075.80
  41. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-192.212
  42. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1130.140
  43. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.142
  45. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.81~20.04.1
  46. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1090.97
  47. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143
  48. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.76~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.101
  50. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1052.59~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-121.131~20.04.1
  52. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1077.82
  53. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1062.65~20.04.1
  54. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1064.70~20.04.1
  55. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1042.43
  56. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1118.125
  57. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-121.131~20.04.1
  58. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.30~20.04.1
  59. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1129.138
  60. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73~20.04.1
  61. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1114.126
  62. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1065.69~20.04.1
  63. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1049.53
  64. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1130.140+fips1
  65. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1135.142+fips1
  66. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.114
  67. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.143+fips1
  68. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-121.131
  69. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75
  70. Upgrade

    Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1015.16~22.04.1
  71. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.81
  72. Upgrade

    Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1014.16~22.04.1
  73. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.81.1
  74. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.76
  75. Upgrade

    Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1014.16~22.04.1
  76. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.72
  77. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1052.59
  78. Upgrade

    Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-45.45~22.04.1
  79. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1062.65
  80. Upgrade

    Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.12~22.04.1
  81. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1064.70
  82. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1066.71
  83. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-121.131
  84. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-44.44.1~22.04.1
  85. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1064.65
  86. Upgrade

    Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1013.14~22.04.1
  87. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.28
  88. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1016.16
  89. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1067.73
  90. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.12~22.04.1
  91. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1062.65
  92. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-44.44.1~22.04.1
  93. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1035.39
  94. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1052.54
  95. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1063.65
  96. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1070.78
  97. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1008.8~22.04.1
  98. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.75+fips1
  99. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1072.81+fips1
  100. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-121.131+fips1
  101. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.76+fips1
  102. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-44.44
  103. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1015.16
  104. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1014.16
  105. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1014.16
  106. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1010.13
  107. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.12
  108. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-44.44.1
  109. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1013.14
  110. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1013.14.1
  111. Upgrade

    Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.12
  112. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1012.12
  113. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1011.12
  114. Upgrade

    Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.

    Fixed in 6.8.0-44.44.1
  115. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2010.10
  116. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1008.8
  117. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-78.78+fips1
  118. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1

Event History

Jun 21, 2024
CVE Published
via MITRE·10:18 AM
Data Sourced
via MITRE·10:18 AM
Description
Data Sourced
via OSV·10:18 AM
DescriptionAffected Software
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityAffected Software
Nov 11, 2026
Data Sourced
via OSV·09:38 AM
Severity

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2024-31076?

CVE-2024-31076 is classified as having medium severity due to its potential impact on CPU offline operations in the Linux kernel.

2

How do I fix CVE-2024-31076?

To fix CVE-2024-31076, update your Linux kernel to versions 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.9.4, or 6.10.

3

What systems are affected by CVE-2024-31076?

CVE-2024-31076 affects various Linux kernel versions across Red Hat and Debian distributions.

4

What could happen if CVE-2024-31076 is exploited?

Exploitation of CVE-2024-31076 could lead to incorrect interrupt affinity management during CPU offline operations, potentially causing instability.

5

Is CVE-2024-31076 related to other vulnerabilities?

CVE-2024-31076 is part of broader issues with interrupt management in the Linux kernel, which should be monitored for related vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203