Improper locking in Linux kernel - CVE-2024-56547

Vulnerability identifier: #VU102183

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-56547

CWE-ID: CWE-667

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the kernel/rcu/tree_nocb.h. A local user can perform a denial of service (DoS) attack.

Linux kernel
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
kernel-debuginfo (Red Hat package)
kernel-debuginfo-common-aarch64 (Red Hat package)
kernel-64k-devel-matched (Red Hat package)
kernel-64k-devel (Red Hat package)
kernel-64k-debuginfo (Red Hat package)
kernel-64k-debug-devel-matched (Red Hat package)
kernel-64k-debug-devel (Red Hat package)
kernel-64k-debug-debuginfo (Red Hat package)
kernel-debuginfo-common-ppc64le (Red Hat package)
kernel-zfcpdump-devel-matched (Red Hat package)
kernel-zfcpdump-devel (Red Hat package)
kernel-debuginfo-common-s390x (Red Hat package)
kernel-debug-devel (Red Hat package)
kernel-debug-debuginfo (Red Hat package)
rv (Red Hat package)
rtla (Red Hat package)
python3-perf (Red Hat package)
perf (Red Hat package)
kernel-tools-debuginfo (Red Hat package)
kernel-headers (Red Hat package)
kernel-devel-matched (Red Hat package)
kernel-devel (Red Hat package)
kernel-debuginfo-common-x86_64 (Red Hat package)
kernel-debug-devel-matched (Red Hat package)

Install update from vendor's website.

Linux kernel - addressed in versions 6.12.2, 6.13
kernel-debuginfo (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debuginfo-common-aarch64 (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-devel-matched (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-devel (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-debuginfo (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-debug-devel-matched (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-debug-devel (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-64k-debug-debuginfo (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debuginfo-common-ppc64le (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-zfcpdump-devel-matched (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-zfcpdump-devel (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debuginfo-common-s390x (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debug-devel (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debug-debuginfo (Red Hat package) - update to 6.12.0-55.76.1.el10_0
rv (Red Hat package) - update to 6.12.0-55.76.1.el10_0
rtla (Red Hat package) - update to 6.12.0-55.76.1.el10_0
python3-perf (Red Hat package) - update to 6.12.0-55.76.1.el10_0
perf (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-tools-debuginfo (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-headers (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-devel-matched (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-devel (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debuginfo-common-x86_64 (Red Hat package) - update to 6.12.0-55.76.1.el10_0
kernel-debug-devel-matched (Red Hat package) - update to 6.12.0-55.76.1.el10_0

• https://git.kernel.org/stable/c/224b62028959858294789772d372dcb36cf5f820
• https://git.kernel.org/stable/c/2996980e20b7a54a1869df15b3445374b850b155
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.2
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13

• Improper locking in Linux kernel rcu
• Red Hat Enterprise Linux 10 update for kernel