CVE-2024-43890: tracing: Fix overflow in get_free_elt()
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix overflow in getfreeelt()
"tracingmap->nextelt" in getfreeelt() is at risk of overflowing.
Once it overflows, new elements can still be inserted into the tracingmap even though the maximum number of elements (maxelts) has been reached. Continuing to insert elements after the overflow could result in the tracingmap containing "tracingmap->maxsize" elements, leaving no empty entries. If any attempt is made to insert an element into a full tracingmap using tracingmapinsert(), it will cause an infinite loop with preemption disabled, leading to a CPU hang problem.
Fix this by preventing any further increments to "tracingmap->nextelt" once it reaches "tracingmap->maxelt".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43890?
CVE-2024-43890 has been classified with a high severity due to the potential for an overflow in tracing, impacting kernel operations.
How do I fix CVE-2024-43890?
To mitigate CVE-2024-43890, it is recommended to upgrade to versions 5.10.226-1, 6.1.123-1, 6.12.10-1, or higher.
What systems are affected by CVE-2024-43890?
CVE-2024-43890 affects various versions of the Linux kernel, particularly those prior to 5.10.226 and certain versions in the 4.x series.
Can CVE-2024-43890 lead to system crashes?
Yes, the overflow associated with CVE-2024-43890 can potentially lead to unexpected behavior and system crashes.
Is there a public exploit for CVE-2024-43890?
As of now, there is no publicly known exploit for CVE-2024-43890, but it is advisable to apply patches promptly to prevent any potential attacks.