Linux Kernel Vulnerability CVE-2024-57917: Inconsistent cpumask Printing
Summary
CVE-2024-57917: In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, the following warning was discovered: different return values (15 and 11)... Affects linux versions < 6.1.128-1. Fixed in 6.1.128-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system operations. It is known for its stability, performance, and flexibility, supporting a wide range of hardware architectures. However, like any complex software, it is susceptible to vulnerabilities. CVE-2024-57917 specifically affects the cpumask handling during the printing process, which can lead to inconsistencies and potential system warnings.
Vulnerability Detail
CVE-2024-57917 is a vulnerability in the Linux kernel that arises from the improper handling of the cpumask during the printing of core_siblings_list. During fuzz testing, it was discovered that the function kvasprintf() could produce different return values due to modifications in the core_cpumask between the steps of calculating the formatted string length and the actual formatting. This inconsistency can lead to warnings and potentially disrupt system operations, especially in environments where CPU hotplugging is utilized.
How To Fix
Minimum fixed version
6.1.128-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid CPU hotplugging while printing the cpumask to prevent inconsistencies. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
CVE-2024-57917 is a significant vulnerability in the Linux kernel that can lead to inconsistent cpumask printing and system warnings. Users are encouraged to update their systems to the latest patched versions to mitigate this risk. Temporary workarounds are available, but the best course of action is to apply the updates promptly.
See every vulnerability recorded for linux →
FAQ
CVE-2024-57917 is a vulnerability in the Linux kernel related to inconsistent cpumask printing, which can lead to warnings during system operations.
This vulnerability can cause warnings and potential disruptions in systems that utilize CPU hotplugging, affecting stability and performance.
Yes, users are advised to update their Linux packages to the latest versions where this vulnerability has been addressed.
As a temporary measure, avoid CPU hotplugging while printing the cpumask to minimize the risk of encountering this issue.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using a manifest file like package-lock.json. You can check your application for vulnerabilities without signup using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
