In the Linux kernel, the following vulnerability has been resolved:
lib/generic-radix-tree.c: Fix rare race in _genradixptr_alloc()
If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated node that might be used later.
If we then use that node for a new non-root node, it'll still have a pointer to the old root instead of being zeroed - fix this by zeroing it in the cmpxchg failure path.
{ "vanir_signatures": [ { "digest": { "length": 954.0, "function_hash": "114043816470045208283198826457053663186" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169", "signature_type": "Function", "target": { "function": "__genradix_ptr_alloc", "file": "lib/generic-radix-tree.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-47668-80406088" }, { "digest": { "line_hashes": [ "228289215517357730209751670299637445916", "208295266490910194585854493123635630258", "171903617937477142098805990175340184153", "106482310649496102856057470683378103340" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f078f8ca93b28a34e20bd050f12cd4efeee7c0f", "signature_type": "Line", "target": { "file": "lib/generic-radix-tree.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-47668-b88b0b14" }, { "digest": { "length": 954.0, "function_hash": "114043816470045208283198826457053663186" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f078f8ca93b28a34e20bd050f12cd4efeee7c0f", "signature_type": "Function", "target": { "function": "__genradix_ptr_alloc", "file": "lib/generic-radix-tree.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-47668-c5ead844" }, { "digest": { "line_hashes": [ "228289215517357730209751670299637445916", "208295266490910194585854493123635630258", "171903617937477142098805990175340184153", "106482310649496102856057470683378103340" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad5ee9feebc2eb8cfc76ed74a2d6e55343b0e169", "signature_type": "Line", "target": { "file": "lib/generic-radix-tree.c" }, "deprecated": false, "signature_version": "v1", "id": "CVE-2024-47668-d3824fd9" } ] }