CVE-2024-57939— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 14
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 76d2a0493a17d4c8ecc781366850c3c4f8e1a446< 8c38baa03ac8e18140faf36a3b955d30cad48e74 | affected |
76d2a0493a17d4c8ecc781366850c3c4f8e1a446< 10c24df2e303f517fab0359392c11b6b1d553f2b | affected | ||
76d2a0493a17d4c8ecc781366850c3c4f8e1a446< c21df31fc2a4afc02a6e56511364e9e793ea92ec | affected | ||
76d2a0493a17d4c8ecc781366850c3c4f8e1a446< f48f060a4b36b5e96628f6c3fb1540f1e8dedb69 | affected | ||
76d2a0493a17d4c8ecc781366850c3c4f8e1a446< 76ab0afcdbe8c9685b589016ee1c0e25fe596707 | affected | ||
76d2a0493a17d4c8ecc781366850c3c4f8e1a446< 6a97f4118ac07cfdc316433f385dbdc12af5025e | affected | ||
4.15 | affected | ||
< 4.15 | unaffected | ||
| … +6 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-57939の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
riscv: Fix sleeping in invalid context in die()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix sleeping in invalid context in die() die() can be called in exception handler, and therefore cannot sleep. However, die() takes spinlock_t which can sleep with PREEMPT_RT enabled. That causes the following warning: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 285, name: mutex preempt_count: 110001, expected: 0 RCU nest depth: 0, expected: 0 CPU: 0 UID: 0 PID: 285 Comm: mutex Not tainted 6.12.0-rc7-00022-ge19049cf7d56-dirty #234 Hardware name: riscv-virtio,qemu (DT) Call Trace: dump_backtrace+0x1c/0x24 show_stack+0x2c/0x38 dump_stack_lvl+0x5a/0x72 dump_stack+0x14/0x1c __might_resched+0x130/0x13a rt_spin_lock+0x2a/0x5c die+0x24/0x112 do_trap_insn_illegal+0xa0/0xea _new_vmalloc_restore_context_a0+0xcc/0xd8 Oops - illegal instruction [#1] Switch to use raw_spinlock_t, which does not sleep even with PREEMPT_RT enabled.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于riscv模块中die函数在异常处理程序中尝试睡眠。这可能导致警告或系统不稳定。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2024-57939の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-57939のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-57939 补丁与修复 (6)
Same Patch Batch · Linux · 2025-01-21 · 25 CVEs total
| CVE-2024-57944 | iio: adc: ti-ads1298: Add NULL check in ads1298_init | |
| CVE-2024-57946 | virtio-blk: don't keep queue frozen during system suspend | |
| CVE-2025-21664 | dm thin: make get_first_thin use rcu-safe list first function | |
| CVE-2025-21663 | net: stmmac: dwmac-tegra: Read iommu stream id from device tree | |
| CVE-2025-21662 | net/mlx5: Fix variable not being completed when function returns | |
| CVE-2025-21661 | gpio: virtuser: fix missing lookup table cleanups | |
| CVE-2025-21660 | ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked | |
| CVE-2025-21659 | netdev: prevent accessing NAPI instances from another namespace | |
| CVE-2025-21658 | btrfs: avoid NULL pointer dereference if no valid extent tree | |
| CVE-2025-21657 | sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass() | |
| CVE-2024-57945 | riscv: mm: Fix the out of bound issue of vmemmap address | |
| CVE-2025-21656 | hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur | |
| CVE-2024-57930 | tracing: Have process_string() also allow arrays | |
| CVE-2024-57943 | exfat: fix the new buffer was not zeroed before writing | |
| CVE-2024-57942 | netfs: Fix ceph copy to cache on write-begin | |
| CVE-2024-57941 | netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled | |
| CVE-2024-57940 | exfat: fix the infinite loop in exfat_readdir() | |
| CVE-2024-57938 | net/sctp: Prevent autoclose integer overflow in sctp_association_init() | |
| CVE-2024-57936 | RDMA/bnxt_re: Fix max SGEs for the Work Request | |
| CVE-2024-57935 | RDMA/hns: Fix accessing invalid dip_ctx during destroying QP |
Showing 20 of 25 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected
同じベンダー: Linux
- CVE-2026-53363
xfrm: iptfs: preserve shared-frag marker in iptfs_consume_fr - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected
V. CVE-2024-57939へのコメント
まだコメントはありません