vulnerability
Ubuntu: (Multiple Advisories) (CVE-2024-47739): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | 2024-10-21 | 2024-12-18 | 2025-04-29 |
Description
In the Linux kernel, the following vulnerability has been resolved:
padata: use integer wrap around to prevent deadlock on seq_nr overflow
When submitting more than 2^32 padata objects to padata_do_serial, the
current sorting implementation incorrectly sorts padata objects with
overflowed seq_nr, causing them to be placed before existing objects in
the reorder list. This leads to a deadlock in the serialization process
as padata_find_next cannot match padata->seq_nr and pd->processed
because the padata instance with overflowed seq_nr will be selected
next.
To fix this, we use an unsigned integer wrap around to correctly sort
padata objects in scenarios with integer overflow.
Solution(s)
References
- CVE-2024-47739
- https://attackerkb.com/topics/CVE-2024-47739
- UBUNTU-USN-7166-1
- UBUNTU-USN-7166-2
- UBUNTU-USN-7166-3
- UBUNTU-USN-7166-4
- UBUNTU-USN-7186-1
- UBUNTU-USN-7186-2
- UBUNTU-USN-7194-1
- UBUNTU-USN-7276-1
- UBUNTU-USN-7277-1
- UBUNTU-USN-7301-1
- UBUNTU-USN-7303-1
- UBUNTU-USN-7303-2
- UBUNTU-USN-7303-3
- UBUNTU-USN-7304-1
- UBUNTU-USN-7310-1
- UBUNTU-USN-7311-1
- UBUNTU-USN-7384-1
- UBUNTU-USN-7384-2
- UBUNTU-USN-7385-1
- UBUNTU-USN-7386-1
- UBUNTU-USN-7403-1
- UBUNTU-USN-7468-1

Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.