Riskcovery

CVE-2024-40944

x86/kexec: Fix bug with call depth tracking

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix bug with call depth tracking

The call to cc_platform_has() triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by load_segments() and GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate.

Call cc_platform_has() earlier in the function when GS is still valid.

[ bp: Massage. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5d8213864ade86b48fc492584ea86d65a62f892e to before d91ddd05082691e69b30744825d18ae799293258Affected
  • 5d8213864ade86b48fc492584ea86d65a62f892e to before 2cfb464669b645a9b98478b74f2bcea9860dcff1Affected
  • 5d8213864ade86b48fc492584ea86d65a62f892e to before 93c1800b3799f17375989b0daf76497dd3e80922Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.