CVE-2024-50178

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50178
In the Linux kernel, the following vulnerability has been resolved: cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() Use raw_smp_processor_id() instead of plain smp_processor_id() in do_service_request(), otherwise we may get some errors with the driver enabled: BUG: using smp_processor_id() in preemptible [00000000] code: (udev-worker)/208 caller is loongson3_cpufreq_probe+0x5c/0x250 [loongson3_cpufreq]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2b7ec33e534f7a10033a5cf07794acf48b182bbe Patch
https://git.kernel.org/stable/c/2f78e4a6d2702ac03c2bf2ed3a0e344e1fa9f967 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

27 Nov 2024, 20:11

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2b7ec33e534f7a10033a5cf07794acf48b182bbe - () https://git.kernel.org/stable/c/2b7ec33e534f7a10033a5cf07794acf48b182bbe - Patch
References () https://git.kernel.org/stable/c/2f78e4a6d2702ac03c2bf2ed3a0e344e1fa9f967 - () https://git.kernel.org/stable/c/2f78e4a6d2702ac03c2bf2ed3a0e344e1fa9f967 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

08 Nov 2024, 19:01

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: loongson3: Use raw_smp_processor_id() en do_service_request() Use raw_smp_processor_id() en lugar de smp_processor_id() simple en do_service_request(), de lo contrario podemos obtener algunos errores con el controlador habilitado: ERROR: uso de smp_processor_id() en código preemptible [00000000]: (udev-worker)/208 el que llama es loongson3_cpufreq_probe+0x5c/0x250 [loongson3_cpufreq]

08 Nov 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-08 06:15

Updated : 2024-11-27 20:11

NVD link : CVE-2024-50178

Mitre link : CVE-2024-50178

CVE.ORG link : CVE-2024-50178

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo