CVE-2024-43890

tracing: Fix overflow in get_free_elt()

State: Published
Severity: Not scored
Published: Aug 26, 2024
Updated: Oct 15, 2026
Reserved: Aug 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix overflow in get_free_elt()

"tracing_map->next_elt" in get_free_elt() is at risk of overflowing.

Once it overflows, new elements can still be inserted into the tracing_map even though the maximum number of elements (`max_elts`) has been reached. Continuing to insert elements after the overflow could result in the tracing_map containing "tracing_map->max_size" elements, leaving no empty entries. If any attempt is made to insert an element into a full tracing_map using `__tracing_map_insert()`, it will cause an infinite loop with preemption disabled, leading to a CPU hang problem.

Fix this by preventing any further increments to "tracing_map->next_elt" once it reaches "tracing_map->max_elt".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	08d43a5fa063e03c860f2f391a30c388bcbc948e to before 302ceb625d7b990db205a15e371f9a71238de91cAffected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before d3e4dbc2858fe85d1dbd2e72a9fc5dea988b5c18Affected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before eb223bf01e688dfe37e813c8988ee11c8c9f8d0aAffected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before cd10d186a5409a1fe6e976df82858e9773a698daAffected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before 788ea62499b3c18541fd6d621964d8fafbc4aec5Affected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before a172c7b22bc2feaf489cfc6d6865f7237134fdf8Affected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before 236bb4690773ab6869b40bedc7bc8d889e36f9d6Affected 08d43a5fa063e03c860f2f391a30c388bcbc948e to before bcf86c01ca4676316557dd482c8416ece8c2e143Affected
LinuxLinux	4.7Affected before 4.7Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.105 through 6.1.Not affected 6.6.46 through 6.6.Not affected 6.10.5 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

08d43a5fa063e03c860f2f391a30c388bcbc948e to before 302ceb625d7b990db205a15e371f9a71238de91cAffected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before d3e4dbc2858fe85d1dbd2e72a9fc5dea988b5c18Affected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before eb223bf01e688dfe37e813c8988ee11c8c9f8d0aAffected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before cd10d186a5409a1fe6e976df82858e9773a698daAffected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before 788ea62499b3c18541fd6d621964d8fafbc4aec5Affected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before a172c7b22bc2feaf489cfc6d6865f7237134fdf8Affected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before 236bb4690773ab6869b40bedc7bc8d889e36f9d6Affected
08d43a5fa063e03c860f2f391a30c388bcbc948e to before bcf86c01ca4676316557dd482c8416ece8c2e143Affected

LinuxLinux

4.7Affected
before 4.7Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.105 through 6.1.*Not affected
6.6.46 through 6.6.*Not affected
6.10.5 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.