CVE-2024-44968

EUVD-2024-41170
In the Linux kernel, the following vulnerability has been resolved:

tick/broadcast: Move per CPU pointer access into the atomic section

The recent fix for making the take over of the broadcast timer more
reliable retrieves a per CPU pointer in preemptible context.

This went unnoticed as compilers hoist the access into the non-preemptible
region where the pointer is actually used. But of course it's valid that
the compiler keeps it at the place where the code puts it which rightfully
triggers:

  BUG: using smp_processor_id() in preemptible [00000000] code:
       caller is hotplug_cpu__broadcast_tick_pull+0x1c/0xc0

Move it to the actual usage site which is in a non-preemptible region.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
6.1.103 ≤
𝑥
< 6.1.105
linuxlinux_kernel
6.6.44 ≤
𝑥
< 6.6.46
linuxlinux_kernel
6.10.3 ≤
𝑥
< 6.10.5
linuxlinux_kernel
6.11:rc1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.148-1
fixed
bookworm (security)
6.1.158-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.247-1
fixed
forky
6.17.13-1
fixed
sid
6.17.13-1
fixed
trixie
6.12.57-1
fixed
trixie (security)
6.12.48-1
fixed
linux-6.1
bullseye (security)
6.1.158-1~deb11u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux-hwe
bionic
ignored
focal
dne
jammy
dne
noble
dne
xenial
not-affected
linux-hwe-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-hwe-5.8
focal
ignored
jammy
dne
noble
dne
linux-hwe-5.11
focal
ignored
jammy
dne
noble
dne
linux-hwe-5.13
focal
ignored
jammy
dne
noble
dne
linux-hwe-5.15
focal
not-affected
jammy
dne
noble
dne
linux-hwe-5.19
focal
dne
jammy
ignored
noble
dne
linux-hwe-6.2
focal
dne
jammy
ignored
noble
dne
linux-hwe-6.5
focal
dne
jammy
ignored
noble
dne
linux-hwe-6.8
focal
dne
jammy
not-affected
noble
dne
linux-hwe-edge
bionic
ignored
focal
dne
jammy
dne
noble
dne
xenial
ignored
linux-lts-xenial
focal
dne
jammy
dne
noble
dne
trusty
not-affected
linux-kvm
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
xenial
not-affected
linux-allwinner-5.19
focal
dne
jammy
ignored
noble
dne
linux-aws-5.0
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-aws-5.3
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-aws-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-aws-5.8
focal
ignored
jammy
dne
noble
dne
linux-aws-5.11
focal
ignored
jammy
dne
noble
dne
linux-aws-5.13
focal
ignored
jammy
dne
noble
dne
linux-aws-5.15
focal
not-affected
jammy
dne
noble
dne
linux-aws-5.19
focal
dne
jammy
ignored
noble
dne
linux-aws-6.2
focal
dne
jammy
ignored
noble
dne
linux-aws-6.5
focal
dne
jammy
ignored
noble
dne
linux-aws-hwe
focal
dne
jammy
dne
noble
dne
xenial
not-affected
linux-azure
bionic
ignored
focal
not-affected
jammy
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
linux-azure-4.15
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-azure-5.3
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-azure-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-azure-5.8
focal
ignored
jammy
dne
noble
dne
linux-azure-5.11
focal
ignored
jammy
dne
noble
dne
linux-azure-5.13
focal
ignored
jammy
dne
noble
dne
linux-azure-5.15
focal
not-affected
jammy
dne
noble
dne
linux-azure-5.19
focal
dne
jammy
ignored
noble
dne
linux-azure-6.2
focal
dne
jammy
ignored
noble
dne
linux-azure-6.5
focal
dne
jammy
ignored
noble
dne
linux-azure-fde
focal
ignored
jammy
not-affected
noble
not-affected
linux-azure-fde-5.15
focal
not-affected
jammy
dne
noble
dne
linux-azure-fde-5.19
focal
dne
jammy
ignored
noble
dne
linux-azure-fde-6.2
focal
dne
jammy
ignored
noble
dne
linux-bluefield
focal
not-affected
jammy
dne
noble
dne
linux-azure-edge
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
xenial
not-affected
linux-aws-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
linux-azure-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
linux-gcp-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
linux-gcp
bionic
ignored
focal
not-affected
jammy
not-affected
noble
not-affected
xenial
not-affected
linux-gcp-4.15
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-gcp-5.3
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-gcp-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-gcp-5.8
focal
ignored
jammy
dne
noble
dne
linux-gcp-5.11
focal
ignored
jammy
dne
noble
dne
linux-gcp-5.13
focal
ignored
jammy
dne
noble
dne
linux-gcp-5.15
focal
not-affected
jammy
dne
noble
dne
linux-gcp-5.19
focal
dne
jammy
ignored
noble
dne
linux-gcp-6.2
focal
dne
jammy
ignored
noble
dne
linux-gcp-6.5
focal
dne
jammy
ignored
noble
dne
linux-gke
focal
ignored
jammy
not-affected
noble
not-affected
linux-gke-4.15
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-gke-5.4
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-gke-5.15
focal
ignored
jammy
dne
noble
dne
linux-gkeop-5.4
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-gkeop-5.15
focal
not-affected
jammy
dne
noble
dne
linux-ibm-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-ibm-5.15
focal
not-affected
jammy
dne
noble
dne
linux-intel-5.13
focal
ignored
jammy
dne
noble
dne
linux-intel-iotg
focal
dne
jammy
not-affected
noble
dne
linux-intel-iotg-5.15
focal
not-affected
jammy
dne
noble
dne
linux-iot
focal
not-affected
jammy
dne
noble
dne
linux-intel-iot-realtime
focal
dne
jammy
not-affected
noble
dne
linux-lowlatency
focal
dne
jammy
not-affected
noble
not-affected
linux-gkeop
focal
not-affected
jammy
not-affected
noble
not-affected
linux-lowlatency-hwe-5.15
focal
not-affected
jammy
dne
noble
dne
linux-lowlatency-hwe-5.19
focal
dne
jammy
ignored
noble
dne
linux-lowlatency-hwe-6.2
focal
dne
jammy
ignored
noble
dne
linux-lowlatency-hwe-6.5
focal
dne
jammy
ignored
noble
dne
linux-lowlatency-hwe-6.8
focal
dne
jammy
not-affected
noble
dne
linux-nvidia
focal
dne
jammy
not-affected
noble
not-affected
linux-nvidia-6.2
focal
dne
jammy
ignored
noble
dne
linux-nvidia-6.5
focal
dne
jammy
not-affected
noble
dne
linux-nvidia-6.8
focal
dne
jammy
not-affected
noble
dne
linux-nvidia-lowlatency
focal
dne
jammy
dne
noble
not-affected
linux-oracle-5.0
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-oracle-5.3
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-oracle-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-oracle-5.8
focal
ignored
jammy
dne
noble
dne
linux-oracle-5.11
focal
ignored
jammy
dne
noble
dne
linux-oracle-5.13
focal
ignored
jammy
dne
noble
dne
linux-oracle-5.15
focal
not-affected
jammy
dne
noble
dne
linux-oracle-6.5
focal
dne
jammy
ignored
noble
dne
linux-oem
bionic
ignored
focal
dne
jammy
dne
noble
dne
linux-oem-5.6
focal
ignored
jammy
dne
noble
dne
linux-oem-5.10
focal
ignored
jammy
dne
noble
dne
linux-oem-5.13
focal
ignored
jammy
dne
noble
dne
linux-oem-5.14
focal
ignored
jammy
dne
noble
dne
linux-oem-5.17
focal
dne
jammy
ignored
noble
dne
linux-oem-6.0
focal
dne
jammy
ignored
noble
dne
linux-oem-6.1
focal
dne
jammy
ignored
noble
dne
linux-oem-6.5
focal
dne
jammy
ignored
noble
dne
linux-oem-6.8
focal
dne
jammy
dne
noble
not-affected
linux-raspi2
focal
ignored
jammy
dne
noble
dne
linux-raspi-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
linux-raspi-realtime
focal
dne
jammy
dne
noble
not-affected
linux-realtime
focal
dne
jammy
not-affected
noble
not-affected
linux-riscv
focal
ignored
jammy
ignored
noble
not-affected
linux-riscv-5.8
focal
ignored
jammy
dne
noble
dne
linux-riscv-5.11
focal
ignored
jammy
dne
noble
dne
linux-riscv-5.15
focal
not-affected
jammy
dne
noble
dne
linux-riscv-5.19
focal
dne
jammy
ignored
noble
dne
linux-riscv-6.5
focal
dne
jammy
ignored
noble
dne
linux-riscv-6.8
focal
dne
jammy
not-affected
noble
dne
linux-starfive-5.19
focal
dne
jammy
ignored
noble
dne
linux-starfive-6.2
focal
dne
jammy
ignored
noble
dne
linux-starfive-6.5
focal
dne
jammy
ignored
noble
dne
linux-xilinx-zynqmp
focal
not-affected
jammy
not-affected
noble
dne
linux
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
linux-aws
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
linux-ibm
focal
not-affected
jammy
not-affected
noble
not-affected
linux-oracle
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
xenial
not-affected
linux-raspi
focal
not-affected
jammy
not-affected
noble
not-affected
linux-intel
bionic
dne
focal
dne
jammy
dne
noble
not-affected
trusty
dne
xenial
dne