CVE-2024-50133

LoongArch: Don't crash in stack_top() for tasks without vDSO

State: Published
Severity: 5.5 Medium
Published: Nov 5, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Don't crash in stack_top() for tasks without vDSO

Not all tasks have a vDSO mapped, for example kthreads never do. If such a task ever ends up calling stack_top(), it will derefence the NULL vdso pointer and crash.

This can for example happen when using kunit:

[<9000000000203874>] stack_top+0x58/0xa8 [<90000000002956cc>] arch_pick_mmap_layout+0x164/0x220 [<90000000003c284c>] kunit_vm_mmap_init+0x108/0x12c [<90000000003c1fbc>] __kunit_add_resource+0x38/0x8c [<90000000003c2704>] kunit_vm_mmap+0x88/0xc8 [<9000000000410b14>] usercopy_test_init+0xbc/0x25c [<90000000003c1db4>] kunit_try_run_case+0x5c/0x184 [<90000000003c3d54>] kunit_generic_run_threadfn_adapter+0x24/0x48 [<900000000022e4bc>] kthread+0xc8/0xd4 [<9000000000200ce8>] ret_from_kernel_thread+0xc/0xa4

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	803b0fc5c3f2baa6e54978cd576407896f789b08 to before a67d4a02bf43e15544179895ede7d5f97b84b550Affected 803b0fc5c3f2baa6e54978cd576407896f789b08 to before a94c197d4d749954dfaa37e907fcc8c04e4aad7eAffected 803b0fc5c3f2baa6e54978cd576407896f789b08 to before 041cc3860b06770357876d1114d615333b0fbf31Affected 803b0fc5c3f2baa6e54978cd576407896f789b08 to before 134475a9ab8487527238d270639a8cb74c10aab2Affected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.