CVE-2024-40944

x86/kexec: Fix bug with call depth tracking

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix bug with call depth tracking

The call to cc_platform_has() triggers a fault and system crash if call depth

tracking is active because the GS segment has been reset by load_segments() and

GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate.

Call cc_platform_has() earlier in the function when GS is still valid.

[ bp: Massage. ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Published
2024-07-12T12:25Z
EPSS history
Timeline
  • 12 JUL 12:25Z
    x86/kexec: Fix bug with call depth tracking
    cvelistv5