CVE-2024-42094

net/iucv: Avoid explicit cpumask var allocation on stack

State: Published
Severity: Not scored
Published: Jul 29, 2024
Updated: Oct 15, 2026
Reserved: Jul 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net/iucv: Avoid explicit cpumask var allocation on stack

For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow.

Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK.

Use *cpumask_var API(s) to address it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2b085521be5292016097b5e7ca81b26be3f7098dAffected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 842afb47d84536fc976fece8fb6c54bea711ad1aAffected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 9dadab0db7d904413ea1cdaa13f127da05c31e71Affected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 0af718a690acc089aa1bbb95a93df833d864ef53Affected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before d85ca8179a54ff8cf1e1f8c3c9e3799831319baeAffected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 724e7965af054079242b8d6f7e50ee226730a756Affected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959Affected 2356f4cb191100a5e92d537f13e5efdbc697e9cb to before be4e1304419c99a164b4c0e101c7c2a756b635b9Affected
LinuxLinux	2.6.21Affected before 2.6.21Not affected 4.19.317 through 4.19.Not affected 5.4.279 through 5.4.Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.37 through 6.6.Not affected 6.9.8 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2b085521be5292016097b5e7ca81b26be3f7098dAffected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 842afb47d84536fc976fece8fb6c54bea711ad1aAffected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 9dadab0db7d904413ea1cdaa13f127da05c31e71Affected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 0af718a690acc089aa1bbb95a93df833d864ef53Affected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before d85ca8179a54ff8cf1e1f8c3c9e3799831319baeAffected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 724e7965af054079242b8d6f7e50ee226730a756Affected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before 2d090c7f7be3b26fcb80ac04d08a4a8062b1d959Affected
2356f4cb191100a5e92d537f13e5efdbc697e9cb to before be4e1304419c99a164b4c0e101c7c2a756b635b9Affected

LinuxLinux

2.6.21Affected
before 2.6.21Not affected
4.19.317 through 4.19.*Not affected
5.4.279 through 5.4.*Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.37 through 6.6.*Not affected
6.9.8 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.