CVE-2024-41932

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41932
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41932.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-41932
Downstream
Related
Published
2025-01-11T12:25:08Z
Modified
2025-10-15T12:48:19.188620Z
Summary
sched: fix warning in sched_setaffinity
Details

In the Linux kernel, the following vulnerability has been resolved:

sched: fix warning in sched_setaffinity

Commit 8f9ea86fdf99b added some logic to sched_setaffinity that included a WARN when a per-task affinity assignment races with a cpuset update.

Specifically, we can have a race where a cpuset update results in the task affinity no longer being a subset of the cpuset. That's fine; we have a fallback to instead use the cpuset mask. However, we have a WARN set up that will trigger if the cpuset mask has no overlap at all with the requested task affinity. This shouldn't be a warning condition; its trivial to create this condition.

Reproduced the warning by the following setup:

  • $PID inside a cpuset cgroup
  • another thread repeatedly switching the cpuset cpus from 1-2 to just 1
  • another thread repeatedly setting the $PID affinity (via taskset) to 2
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4
Fixed
5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4
Fixed
70ee7947a29029736a1a06c73a48ff37674a851b

Affected versions

v6.*

v6.1
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.2
v6.12.3
v6.12.4
v6.13-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific 

{
    "vanir_signatures": [
        {
            "id": "CVE-2024-41932-228b96f5",
            "signature_type": "Line",
            "target": {
                "file": "kernel/sched/syscalls.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "269438371726585458466566613200989804691",
                    "211427408253213295809454049196111052369",
                    "251650129611946545747980028772462138986",
                    "143657221160584313264887303943947552185"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70ee7947a29029736a1a06c73a48ff37674a851b"
        },
        {
            "id": "CVE-2024-41932-5c98f8f8",
            "signature_type": "Function",
            "target": {
                "file": "kernel/sched/syscalls.c",
                "function": "__sched_setaffinity"
            },
            "signature_version": "v1",
            "digest": {
                "length": 904.0,
                "function_hash": "112208079082531714983477888314016571832"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6"
        },
        {
            "id": "CVE-2024-41932-73d8c54b",
            "signature_type": "Line",
            "target": {
                "file": "kernel/sched/syscalls.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "269438371726585458466566613200989804691",
                    "211427408253213295809454049196111052369",
                    "251650129611946545747980028772462138986",
                    "143657221160584313264887303943947552185"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6"
        },
        {
            "id": "CVE-2024-41932-a589a858",
            "signature_type": "Function",
            "target": {
                "file": "kernel/sched/syscalls.c",
                "function": "__sched_setaffinity"
            },
            "signature_version": "v1",
            "digest": {
                "length": 904.0,
                "function_hash": "112208079082531714983477888314016571832"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70ee7947a29029736a1a06c73a48ff37674a851b"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.12.5