CVE-2024-50138— bpf: Use raw_spinlock_t in ringbuf
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-50138
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
bpf: Use raw_spinlock_t in ringbuf
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Use raw_spinlock_t in ringbuf The function __bpf_ringbuf_reserve is invoked from a tracepoint, which disables preemption. Using spinlock_t in this context can lead to a "sleep in atomic" warning in the RT variant. This issue is illustrated in the example below: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 556208, name: test_progs preempt_count: 1, expected: 0 RCU nest depth: 1, expected: 1 INFO: lockdep is turned off. Preemption disabled at: [<ffffd33a5c88ea44>] migrate_enable+0xc0/0x39c CPU: 7 PID: 556208 Comm: test_progs Tainted: G Hardware name: Qualcomm SA8775P Ride (DT) Call trace: dump_backtrace+0xac/0x130 show_stack+0x1c/0x30 dump_stack_lvl+0xac/0xe8 dump_stack+0x18/0x30 __might_resched+0x3bc/0x4fc rt_spin_lock+0x8c/0x1a4 __bpf_ringbuf_reserve+0xc4/0x254 bpf_ringbuf_reserve_dynptr+0x5c/0xdc bpf_prog_ac3d15160d62622a_test_read_write+0x104/0x238 trace_call_bpf+0x238/0x774 perf_call_bpf_enter.isra.0+0x104/0x194 perf_syscall_enter+0x2f8/0x510 trace_sys_enter+0x39c/0x564 syscall_trace_enter+0x220/0x3c0 do_el0_svc+0x138/0x1dc el0_svc+0x54/0x130 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x17c/0x180 Switch the spinlock to raw_spinlock_t to avoid this error.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于bpf模块中，使用__bpf_ringbuf_reserve函数时，由于使用了spinlock_t，在实时调度（RT）变体中可能导致sleep in atomic警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-50138
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50138
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-11-05 · 50 CVEs total
| CVE-2024-50124 | Bluetooth: ISO: Fix UAF on iso_sock_timeout | |
| CVE-2024-50130 | netfilter: bpf: must hold reference on net namespace | |
| CVE-2024-50132 | tracing/probes: Fix MAX_TRACE_ARGS limit handling | |
| CVE-2024-50134 | drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA | |
| CVE-2024-50136 | net/mlx5: Unregister notifier on eswitch init failure | |
| CVE-2024-50135 | nvme-pci: fix race condition between reset and nvme_dev_disable() | |
| CVE-2024-50137 | reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC | |
| CVE-2024-50133 | LoongArch: Don't crash in stack_top() for tasks without vDSO | |
| CVE-2024-50125 | Bluetooth: SCO: Fix UAF on sco_sock_timeout | |
| CVE-2024-50123 | bpf: Add the missing BPF_LINK_TYPE invocation for sockmap | |
| CVE-2024-50127 | net: sched: fix use-after-free in taprio_change() | |
| CVE-2024-50121 | nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net | |
| CVE-2024-50122 | PCI: Hold rescan lock while adding devices during host probe | |
| CVE-2024-50120 | smb: client: Handle kstrdup failures for passwords | |
| CVE-2024-50119 | cifs: fix warning when destroy 'cifs_io_request_pool' | |
| CVE-2024-50118 | btrfs: reject ro->rw reconfiguration if there are hard ro requirements | |
| CVE-2024-50117 | drm/amd: Guard against bad data for ATIF ACPI method | |
| CVE-2024-50116 | nilfs2: fix kernel bug due to missing clearing of buffer delay flag | |
| CVE-2024-50115 | KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory | |
| CVE-2024-50114 | KVM: arm64: Unregister redistributor for failed vCPU creation |
Showing top 20 of 50 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-50138
No comments yet