Log in Start free

Vulnerability · Published Jan 11, 2025 · Assigned by Linux

CVE-2024-48876stackdepot: fix stack_depot_save_flags() in NMI context

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.1%top 96.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stack_depot_save_flags() in NMI context Per documentation, stack_depot_save_flags() was meant to be usable from NMI context if STACK_DEPOT_FLAG_CAN_ALLOC is unset. However, it still would try to take the pool_lock in an attempt to save a stack trace in the current pool (if space is available). This could result in deadlock if an NMI is handled while pool_lock is already held. To avoid deadlock, only try to take the lock in NMI context and give up if unsuccessful. The documentation is fixed to clearly convey this.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.5-1DEBIAN-CVE-2024-48876
Debian:14linux6.12.5-1DEBIAN-CVE-2024-48876
Ubuntu:24.04:LTSlinux6.8.0-58.60UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux6.8.0-58.60USN-7449-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-aws6.8.0-1027.29UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-aws6.8.0-1027.29USN-7449-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1027.29~22.04.1USN-7451-1
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1027.29~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-azure6.8.0-1027.32USN-7449-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1027.32UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1012.12~24.04.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1027.32~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1027.32~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1014.15UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-gcp6.8.0-1028.30USN-7450-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1028.30UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1011.11~24.04.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1028.30~22.04.1USN-7452-1
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1028.30~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-gke6.8.0-1023.27UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-gke6.8.0-1023.27USN-7450-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1010.12USN-7450-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1010.12UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-21.21~24.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-21.21~24.04.1USN-7379-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-58.60~22.04.1USN-7449-2
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-58.60~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-ibm6.8.0-1024.24UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-ibm6.8.0-1024.24USN-7449-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1024.24~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-58.60.1USN-7449-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-58.60.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1011.12~24.04.1USN-7381-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-58.60.1~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1026.29UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1026.29USN-7449-1
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1026.29~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1026.29~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1026.29.1USN-7449-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1026.29.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1017.17UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1017.17USN-7382-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1026.26USN-7449-1
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1026.26UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-oracle6.8.0-1024.25USN-7449-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1024.25UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1024.25~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1024.25~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32USN-7524-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32UBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-riscv6.8.0-58.60.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-48876
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-48876
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-48876

Affected products (as reported)

VendorProductVersions
Linux Linux 4434a56ec20925333d6cf4d4093641d063abd35b – before 9bfeeeff2c92b9dd261198b601b45bde4c5298414434a56ec20925333d6cf4d4093641d063abd35b – before 031e04bdc834cda3b054ef6b698503b2b97e8186
Linux Linux 6.8

References