Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by load_segments() and GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate. Call cc_platform_has() earlier in the function when GS is still valid. [ bp: Massage. ]

INFO

Published Date :

2024-07-12T12:25:18.490Z

Last Modified :

2025-05-04T09:18:30.668Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-40944 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-40944.

URL Resource
https://git.kernel.org/stable/c/2cfb464669b645a9b98478b74f2bcea9860dcff1 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/93c1800b3799f17375989b0daf76497dd3e80922 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/d91ddd05082691e69b30744825d18ae799293258 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024071219-CVE-2024-40944-98ef@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-40944 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-40944 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact