CVE-2024-49954

static_call: Replace pointless WARN_ON() in static_call_module_notify()

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

static_call: Replace pointless WARN_ON() in static_call_module_notify()

static_call_module_notify() triggers a WARN_ON(), when memory allocation

fails in __static_call_add_module().

That's not really justified, because the failure case must be correctly

handled by the well known call chain and the error code is passed

through to the initiating userspace application.

A memory allocation fail is not a fatal problem, but the WARN_ON() takes

the machine out when panic_on_warn is set.

Replace it with a pr_warn().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-10-21T18:02Z
EPSS history
Timeline
  • 21 OCT 18:02Z
    static_call: Replace pointless WARN_ON() in static_call_module_notify()
    cvelistv5