CVE-2024-43890

Severity CVSS v4.0:
Pending analysis
Type:
CWE-190 Integer Overflow or Wraparound
Publication date:
26/08/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tracing: Fix overflow in get_free_elt()<br /> <br /> "tracing_map-&gt;next_elt" in get_free_elt() is at risk of overflowing.<br /> <br /> Once it overflows, new elements can still be inserted into the tracing_map<br /> even though the maximum number of elements (`max_elts`) has been reached.<br /> Continuing to insert elements after the overflow could result in the<br /> tracing_map containing "tracing_map-&gt;max_size" elements, leaving no empty<br /> entries.<br /> If any attempt is made to insert an element into a full tracing_map using<br /> `__tracing_map_insert()`, it will cause an infinite loop with preemption<br /> disabled, leading to a CPU hang problem.<br /> <br /> Fix this by preventing any further increments to "tracing_map-&gt;next_elt"<br /> once it reaches "tracing_map-&gt;max_elt".

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.7 (including) 4.19.320 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.282 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.224 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.165 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.105 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.46 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.5 (excluding)
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*