CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack
In the Linux kernel, the following vulnerability has been resolved:
net/dpaa2: Avoid explicit cpumask var allocation on stack
For CONFIGCPUMASKOFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow.
Instead, kernel code should always use cpumaskvar API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIGCPUMASKOFFSTACK.
Use cpumaskvar API(s) to address it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42093?
CVE-2024-42093 has a medium severity rating due to the potential for stack overflow issues in the Linux kernel.
How do I fix CVE-2024-42093?
To fix CVE-2024-42093, update your Linux kernel to the latest versions such as 5.10.223-1 or 6.1.123-1 that include the patch.
Which versions of the Linux kernel are affected by CVE-2024-42093?
CVE-2024-42093 affects Linux kernel versions from 5.5 up to 6.6.37, with specific version ranges needing updates.
What type of vulnerability is CVE-2024-42093?
CVE-2024-42093 is a stack overflow vulnerability related to the incorrect allocation of cpumask variables in the Linux kernel.
Is my system at risk with CVE-2024-42093?
Systems running affected versions of the Linux kernel are at risk if they have CONFIG_CPUMASK_OFFSTACK enabled.