CVE-2024-56706
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
28/12/2024
Last modified:
26/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex<br />
<br />
Reservation of the PMU hardware is done at first event creation<br />
and is protected by a pair of mutex_lock() and mutex_unlock().<br />
After reservation of the PMU hardware the memory<br />
required for the PMUs the event is to be installed on is<br />
allocated by allocate_buffers() and alloc_sampling_buffer().<br />
This done outside of the mutex protection.<br />
Without mutex protection two or more concurrent invocations of<br />
perf_event_init() may run in parallel.<br />
This can lead to allocation of Sample Data Blocks (SDBs)<br />
multiple times for the same PMU.<br />
Prevent this and protect memory allocation of SDBs by<br />
mutex.
Impact
Base Score 3.x
6.30
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (including) | 6.12.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



