Skip to content
Heist/ feed
Unrated

tracing: Build event generation tests only as modules

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock (get a reference) those event file reference in module init function, and unlock and delete it in module exit function. This is because those are designed for playing as modules. If we make those modules as built-in, those events are left locked in the kernel, and never be removed. This causes kprobe event self-test failure as below. [ 97.349708] ------------[ cut here ]------------ [ 97.353453] WARNING: CPU: 3 PID: 1 at kernel/trace/trace_kprobe.c:2133 kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.357106] Modules linked in: [ 97.358488] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.9.0-g699646734ab5-dirty #14 [ 97.361556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [ 97.363880] RIP: 0010:kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.365538] Code: a8 24 08 82 e9 ae fd ff ff 90 0f 0b 90 48 c7 c7 e5 aa 0b 82 e9 ee fc ff ff 90 0f 0b 90 48 c7 c7 2d 61 06 82 e9 8e fd ff ff 90 <0f> 0b 90 48 c7 c7 33 0b 0c 82 89 c6 e8 6e 03 1f ff 41 ff c7 e9 90 [ 97.370429] RSP: 0000:ffffc90000013b50 EFLAGS: 00010286 [ 97.371852] RAX: 00000000fffffff0 RBX: ffff888005919c00 RCX: 0000000000000000 [ 97.373829] RDX: ffff888003f40000 RSI: ffffffff8236a598 RDI: ffff888003f40a68 [ 97.375715] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 97.377675] R10: ffffffff

Announced Source revision 1
Original source ↗

CVE-2024-41004

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-41004

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "a85bae262ccecc52a40c466ec067f6c915e0839d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "98a7bfc48fffe170a60d87a5cbb7cdddf08184c3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "32ef4dc2b1caf5825c0cf50646479608311cafc3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "55d5d08174366efe57ca9e79964828b20c626c45",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "72a0199b361df2387018697b023fdcdd357449a9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "9fe41efaca08416657efa8731c0d47ccb6a3f3eb",
        "lessThan": "3572bd5689b0812b161b40279e39ca5b66d73e88",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "kernel/trace/Kconfig"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.6",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.221",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.162",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.96",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.36",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.7",
        "versionType": "semver",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "kernel/trace/Kconfig"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-41004

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26654 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement