CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write
In the Linux kernel, the following vulnerability has been resolved:
tracing: Prevent bad count for tracingcpumaskwrite
If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56763?
The severity of CVE-2024-56763 is classified as a medium risk due to the potential for causing incorrect behavior in the tracing process.
How do I fix CVE-2024-56763?
To fix CVE-2024-56763, update the Linux kernel to a version that is not affected, specifically versions later than 6.1.123 or 6.2 and later than 6.7, or any version after 6.13-rc4.
Which versions of the Linux kernel are affected by CVE-2024-56763?
CVE-2024-56763 affects Linux kernel versions from 2.6.29 up to 6.1.123, from 6.2 up to 6.6.69, from 6.7 up to 6.12.8, and specific 6.13 release candidates.
What does CVE-2024-56763 exploit?
CVE-2024-56763 exploits a vulnerability in the tracing subsystem, which could result in warnings when a large count is provided during bitmap parsing.
Is there a patch available for CVE-2024-56763?
Yes, patches addressing CVE-2024-56763 have been implemented in newer kernel releases that users should apply.