#VU94991 Improper locking in Linux kernel - CVE-2024-41064
Vulnerability identifier: #VU94991
Vulnerability risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-41064
CWE-ID:
CWE-667
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the eeh_pe_bus_get() function in arch/powerpc/kernel/eeh_pe.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel: All versions
External links
https://git.kernel.org/stable/c/8836e1bf5838ac6c08760e0a2dd7cf6410aa7ff3
https://git.kernel.org/stable/c/033c51dfdbb6b79ab43fb3587276fa82d0a329e1
https://git.kernel.org/stable/c/4fad7fef847b6028475dd7b4c14fcb82b3e51274
https://git.kernel.org/stable/c/4bc246d2d60d071314842fa448faa4ed39082aff
https://git.kernel.org/stable/c/f23c3d1ca9c4b2d626242a4e7e1ec1770447f7b5
https://git.kernel.org/stable/c/428d940a8b6b3350b282c14d3f63350bde65c48b
https://git.kernel.org/stable/c/a1216e62d039bf63a539bbe718536ec789a853dd
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
