CVE-2024-41932
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-41932
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41932.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-41932
- Downstream
- Related
- Published
- 2025-01-11T12:25:08.892Z
- Modified
- 2025-11-19T10:37:45.771065Z
- Summary
- sched: fix warning in sched_setaffinity
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
sched: fix warning in sched_setaffinity
Commit 8f9ea86fdf99b added some logic to sched_setaffinity that included a WARN when a per-task affinity assignment races with a cpuset update.
Specifically, we can have a race where a cpuset update results in the task affinity no longer being a subset of the cpuset. That's fine; we have a fallback to instead use the cpuset mask. However, we have a WARN set up that will trigger if the cpuset mask has no overlap at all with the requested task affinity. This shouldn't be a warning condition; its trivial to create this condition.
Reproduced the warning by the following setup:
- $PID inside a cpuset cgroup
- another thread repeatedly switching the cpuset cpus from 1-2 to just 1
- another thread repeatedly setting the $PID affinity (via taskset) to 2
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4Fixed5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4Fixed70ee7947a29029736a1a06c73a48ff37674a851b
Affected versions
v6.*
v6.1
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.2
v6.12.3
v6.12.4
v6.13-rc1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/sched/syscalls.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70ee7947a29029736a1a06c73a48ff37674a851b",
"digest": {
"line_hashes": [
"269438371726585458466566613200989804691",
"211427408253213295809454049196111052369",
"251650129611946545747980028772462138986",
"143657221160584313264887303943947552185"
],
"threshold": 0.9
},
"id": "CVE-2024-41932-228b96f5"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/sched/syscalls.c",
"function": "__sched_setaffinity"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6",
"digest": {
"length": 904.0,
"function_hash": "112208079082531714983477888314016571832"
},
"id": "CVE-2024-41932-5c98f8f8"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/sched/syscalls.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6",
"digest": {
"line_hashes": [
"269438371726585458466566613200989804691",
"211427408253213295809454049196111052369",
"251650129611946545747980028772462138986",
"143657221160584313264887303943947552185"
],
"threshold": 0.9
},
"id": "CVE-2024-41932-73d8c54b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/sched/syscalls.c",
"function": "__sched_setaffinity"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70ee7947a29029736a1a06c73a48ff37674a851b",
"digest": {
"length": 904.0,
"function_hash": "112208079082531714983477888314016571832"
},
"id": "CVE-2024-41932-a589a858"
}
]