Riskcovery

CVE-2024-47710

sock_map: Add a cond_resched() in sock_hash_free()

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
Oct 15, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

sock_map: Add a cond_resched() in sock_hash_free()

Several syzbot soft lockup reports all have in common sock_hash_free()

If a map with a large number of buckets is destroyed, we need to yield the cpu when needed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5bed77b0a2a0e6b6bc0ae8e851cafb38ef0374df to before bc05f6855642cff3c0eeb63060b35d8c4f8a851dAffected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 1a11a1a53255ddab8a903cdae01b9d3eb2c1a47bAffected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 984648aac87a6a1c8fd61663bec3f7b61eafad5eAffected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 04f62c012e0e4683e572b30baf6004ca0a3f6772Affected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 80bd490ac0a3b662a489e17d8eedeb1e905a3d40Affected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before ae8c1b3e7353ad240b829eabac7ba2584b2c6bdcAffected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before cd10abf41bae55c9d2b93f34a516dbf52626bcb7Affected
  • 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before b1339be951ad31947ae19bc25cb08769bf255100Affected
  • 6fc372656a1ebed8c1ebe0011881058c02eeddc0Affected
  • 5.4.49 to before 5.4.285Affected
  • 5.7.6 to before 5.8Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.4.285 through 5.4.*Not affected
  • 5.10.227 through 5.10.*Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.