CVE-2024-35929— rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
Affected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 7625926086765123251f765d91fc3a70617d334d< 4d58c9fb45c70e62c19e8be3f3605889c47601bc | affected |
7625926086765123251f765d91fc3a70617d334d< 927d1f4f77e4784ab3944a9df86ab14d1cd3185a | affected | ||
7625926086765123251f765d91fc3a70617d334d< dda98810b552fc6bf650f4270edeebdc2f28bd3f | affected | ||
6.5 | affected | ||
< 6.5 | unaffected | ||
6.6.27≤ 6.6.* | unaffected | ||
6.8.6≤ 6.8.* | unaffected | ||
6.9≤ * | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-35929
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() For the kernels built with CONFIG_RCU_NOCB_CPU_DEFAULT_ALL=y and CONFIG_RCU_LAZY=y, the following scenarios will trigger WARN_ON_ONCE() in the rcu_nocb_bypass_lock() and rcu_nocb_wait_contended() functions: CPU2 CPU11 kthread rcu_nocb_cb_kthread ksys_write rcu_do_batch vfs_write rcu_torture_timer_cb proc_sys_write __kmem_cache_free proc_sys_call_handler kmemleak_free drop_caches_sysctl_handler delete_object_full drop_slab __delete_object shrink_slab put_object lazy_rcu_shrink_scan call_rcu rcu_nocb_flush_bypass __call_rcu_commn rcu_nocb_bypass_lock raw_spin_trylock(&rdp->nocb_bypass_lock) fail atomic_inc(&rdp->nocb_lock_contended); rcu_nocb_wait_contended WARN_ON_ONCE(smp_processor_id() != rdp->cpu); WARN_ON_ONCE(atomic_read(&rdp->nocb_lock_contended)) | |_ _ _ _ _ _ _ _ _ _same rdp and rdp->cpu != 11_ _ _ _ _ _ _ _ _ __| Reproduce this bug with "echo 3 > /proc/sys/vm/drop_caches". This commit therefore uses rcu_nocb_try_flush_bypass() instead of rcu_nocb_flush_bypass() in lazy_rcu_shrink_scan(). If the nocb_bypass queue is being flushed, then rcu_nocb_try_flush_bypass will return directly.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-35929
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-35929
请登录查看更多情报信息。
Other References for CVE-2024-35929 (3)
Same Patch Batch · Linux · 2024-05-19 · 82 CVEs total
| CVE-2024-35914 | nfsd: Fix error cleanup path in nfsd_rename() | |
| CVE-2024-35925 | block: prevent division by zero in blk_rq_stat_sum() | |
| CVE-2024-35911 | ice: fix memory corruption bug with suspend and rebuild | |
| CVE-2024-35912 | wifi: iwlwifi: mvm: rfi: fix potential response leaks | |
| CVE-2024-35910 | tcp: properly terminate timers for kernel sockets | |
| CVE-2024-35907 | mlxbf_gige: call request_irq() after NAPI initialized | |
| CVE-2024-35905 | bpf: Protect against int overflow for stack access size | |
| CVE-2024-35904 | selinux: avoid dereference of garbage after mount failure | |
| CVE-2024-35903 | x86/bpf: Fix IP after emitting call depth accounting | |
| CVE-2024-35908 | tls: get psock ref after taking rxlock to avoid leak | |
| CVE-2024-35913 | wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF | |
| CVE-2024-35915 | nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet | |
| CVE-2024-35916 | dma-buf: Fix NULL pointer dereference in sanitycheck() | |
| CVE-2024-35917 | s390/bpf: Fix bpf_plt pointer arithmetic | |
| CVE-2023-52699 | sysv: don't call sb_bread() with pointers_lock held | |
| CVE-2024-35919 | media: mediatek: vcodec: adding lock to protect encoder context list | |
| CVE-2024-35920 | media: mediatek: vcodec: adding lock to protect decoder context list | |
| CVE-2024-35921 | media: mediatek: vcodec: Fix oops when HEVC init fails | |
| CVE-2024-35922 | fbmon: prevent division by zero in fb_videomode_from_videomode() | |
| CVE-2024-35924 | usb: typec: ucsi: Limit read size on v1.2 |
Showing top 20 of 82 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing - CVE-2026-43503
net: skbuff: propagate shared-frag marker through frag-trans - CVE-2026-43502
net/rds: handle zerocopy send cleanup before the message is - CVE-2026-43501
ipv6: rpl: reserve mac_len headroom when recompressed SRH gr - CVE-2026-43498
accel/ivpu: Disallow re-exporting imported GEM objects
Same vendor: Linux
- CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing - CVE-2026-43503
net: skbuff: propagate shared-frag marker through frag-trans - CVE-2026-43502
net/rds: handle zerocopy send cleanup before the message is - CVE-2026-43501
ipv6: rpl: reserve mac_len headroom when recompressed SRH gr - CVE-2026-43498
accel/ivpu: Disallow re-exporting imported GEM objects
V. Comments for CVE-2024-35929
No comments yet