CVE-2024-44958

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance sched_smt_present dec/inc I got the following warn report while doing stress test: jump label: negative count! WARNING: CPU: 3 PID: 38 at kernel/jump_label.c:263 static_key_slow_try_dec+0x9d/0xb0 Call Trace: <TASK> __static_key_slow_dec_cpuslocked+0x16/0x70 sched_cpu_deactivate+0x26e/0x2a0 cpuhp_invoke_callback+0x3ad/0x10d0 cpuhp_thread_fun+0x3f5/0x680 smpboot_thread_fn+0x56d/0x8d0 kthread+0x309/0x400 ret_from_fork+0x41/0x70 ret_from_fork_asm+0x1b/0x30 </TASK> Because when cpuset_cpu_inactive() fails in sched_cpu_deactivate(), the cpu offline failed, but sched_smt_present is decremented before calling sched_cpu_deactivate(), it leads to unbalanced dec/inc, so fix it by incrementing sched_smt_present in the error path.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedSep 4, 2024
First seenSep 4, 2024

How to fix

Update
  • linux linux_kernel4.15, 4.20, 5.15.165, 6.1.105, 6.6.46, 6.10.5 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.14.86 ≤ v < 4.15, 4.19.7 ≤ v < 4.20, 4.20 ≤ v < 5.15.165, 5.16 ≤ v < 6.1.105, 6.2 ≤ v < 6.6.46, 6.7 ≤ v < 6.10.5, 6.114.15, 4.20, 5.15.165, 6.1.105, 6.6.46, 6.10.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.