Skip to content
Heist/ feed
Unrated

tracing: Ensure visibility when inserting an element into tracing_map

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map Running the following two commands in parallel on a multi-processor AArch64 machine can sporadically produce an unexpected warning about duplicate histogram entries: $ while true; do echo hist:key=id.syscall:val=hitcount > \ /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/trigger cat /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/hist sleep 0.001 done $ stress-ng --sysbadaddr $(nproc) The warning looks as follows: [ 2911.172474] ------------[ cut here ]------------ [ 2911.173111] Duplicates detected: 1 [ 2911.173574] WARNING: CPU: 2 PID: 12247 at kernel/trace/tracing_map.c:983 tracing_map_sort_entries+0x3e0/0x408 [ 2911.174702] Modules linked in: iscsi_ibft(E) iscsi_boot_sysfs(E) rfkill(E) af_packet(E) nls_iso8859_1(E) nls_cp437(E) vfat(E) fat(E) ena(E) tiny_power_button(E) qemu_fw_cfg(E) button(E) fuse(E) efi_pstore(E) ip_tables(E) x_tables(E) xfs(E) libcrc32c(E) aes_ce_blk(E) aes_ce_cipher(E) crct10dif_ce(E) polyval_ce(E) polyval_generic(E) ghash_ce(E) gf128mul(E) sm4_ce_gcm(E) sm4_ce_ccm(E) sm4_ce(E) sm4_ce_cipher(E) sm4(E) sm3_ce(E) sm3(E) sha3_ce(E) sha512_ce(E) sha512_arm64(E) sha2_ce(E) sha256_arm64(E) nvme(E) sha1_ce(E) nvme_core(E) nvme_auth(E) t10_pi(E) sg(E) scsi_mod(E) scsi_common(E) efivarfs(E) [ 2911.174738] Unloaded tainted modules: cppc_cpufreq(E):1 [ 2911.180985] CPU: 2 PID: 12247 Comm: cat Kdump: loaded Ta

Announced Source revision 1
Original source ↗

CVE-2024-26645

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-26645

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "5022b331c041e8c54b9a6a3251579bd1e8c0fc0b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "dad9b28f675ed99b4dec261db2a397efeb80b74c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "ef70dfa0b1e5084f32635156c9a5c795352ad860",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "aef1cb00856ccfd614467cfb50b791278992e177",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "f4f7e696db0274ff560482cc52eddbf0551d4b7a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "a1eebe76e187dbe11ca299f8dbb6e45d5b1889e7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "bf4aeff7da85c3becd39fb73bac94122331c30fb",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "c193707dde77ace92a649cd59a17e105e2fbeaef",
        "lessThan": "2b44760609e9eaafc9d234a6883d042fc21132a7",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "kernel/trace/tracing_map.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.17"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.17",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.307",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.269",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.210",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.149",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.76",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.15",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.7.3",
        "versionType": "semver",
        "lessThanOrEqual": "6.7.*"
      },
      {
        "status": "unaffected",
        "version": "6.8",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "kernel/trace/tracing_map.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-26645

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26416 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement