Riskcovery

CVE-2024-47668

lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

State
Published
Severity
7.8 High
Published
Oct 9, 2024
Updated
Aug 5, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated node that might be used later.

If we then use that node for a new non-root node, it'll still have a pointer to the old root instead of being zeroed - fix this by zeroing it in the cmpxchg failure path.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ba20ba2e3743bac786dff777954c11930256075e to before 0f27f4f445390cb7f73d4209cb2bf32834dc53daAffected
  • ba20ba2e3743bac786dff777954c11930256075e to before 99418ec776a39609f50934720419e0b464ca2283Affected
  • ba20ba2e3743bac786dff777954c11930256075e to before ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169Affected
  • ba20ba2e3743bac786dff777954c11930256075e to before ebeff038744c498a036e7a92eb8e433ae0a386d7Affected
  • ba20ba2e3743bac786dff777954c11930256075e to before d942e855324a60107025c116245095632476613eAffected
  • ba20ba2e3743bac786dff777954c11930256075e to before 0f078f8ca93b28a34e20bd050f12cd4efeee7c0fAffected
  • ba20ba2e3743bac786dff777954c11930256075e to before b2f11c6f3e1fc60742673b8675c95b78447f3daeAffected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 5.4.284 through 5.4.*Not affected
  • 5.10.226 through 5.10.*Not affected
  • 5.15.167 through 5.15.*Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.