CVE-2024-38661

Aliases:UBUNTU-CVE-2024-38661DEBIAN-CVE-2024-38661
Advisory lineage Upstream: 0 Downstream: 38
Modified
Published: 25 Jun 2024, 14:22
Last modified:11 May 2026, 20:20

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.26% LOW
0% probability +0.24%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jun 2024, 14:22
Published
Vulnerability first disclosed
11 May 2026, 20:20
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_bitmap() A system crash like this Failing address: 200000cb7df6f000 TEID: 200000cb7df6f403 Fault in home space mode while using kernel ASCE. AS:00000002d71bc007 R3:00000003fe5b8007 S:000000011a446000 P:000000015660c13d Oops: 0038 ilc:3 [#1] PREEMPT SMP Modules linked in: mlx5_ib ... CPU: 8 PID: 7556 Comm: bash Not tainted 6.9.0-rc7 #8 Hardware name: IBM 3931 A01 704 (LPAR) Krnl PSW : 0704e00180000000 0000014b75e7b606 (ap_parse_bitmap_str+0x10e/0x1f8) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3 Krnl GPRS: 0000000000000001 ffffffffffffffc0 0000000000000001 00000048f96b75d3 000000cb00000100 ffffffffffffffff ffffffffffffffff 000000cb7df6fce0 000000cb7df6fce0 00000000ffffffff 000000000000002b 00000048ffffffff 000003ff9b2dbc80 200000cb7df6fcd8 0000014bffffffc0 000000cb7df6fbc8 Krnl Code: 0000014b75e7b5fc: a7840047 brc 8,0000014b75e7b68a 0000014b75e7b600: 18b2 lr %r11,%r2 #0000014b75e7b602: a7f4000a brc 15,0000014b75e7b616 >0000014b75e7b606: eb22d00000e6 laog %r2,%r2,0(%r13) 0000014b75e7b60c: a7680001 lhi %r6,1 0000014b75e7b610: 187b lr %r7,%r11 0000014b75e7b612: 84960021 brxh %r9,%r6,0000014b75e7b654 0000014b75e7b616: 18e9 lr %r14,%r9 Call Trace: [<0000014b75e7b606>] ap_parse_bitmap_str+0x10e/0x1f8 ([<0000014b75e7b5dc>] ap_parse_bitmap_str+0xe4/0x1f8) [<0000014b75e7b758>] apmask_store+0x68/0x140 [<0000014b75679196>] kernfs_fop_write_iter+0x14e/0x1e8 [<0000014b75598524>] vfs_write+0x1b4/0x448 [<0000014b7559894c>] ksys_write+0x74/0x100 [<0000014b7618a440>] __do_syscall+0x268/0x328 [<0000014b761a3558>] system_call+0x70/0x98 INFO: lockdep is turned off. Last Breaking-Event-Address: [<0000014b75e7b636>] ap_parse_bitmap_str+0x13e/0x1f8 Kernel panic - not syncing: Fatal exception: panic_on_oops occured when /sys/bus/ap/a[pq]mask was updated with a relative mask value (like +0x10-0x12,+60,-90) with one of the numeric values exceeding INT_MAX. The fix is simple: use unsigned long values for the internal variables. The correct checks are already in place in the function but a simple int for the internal variables was used with the possibility to overflow.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.26%• Percentile: 18%

Techniques & Countermeasures

  • CWE-190•Integer Overflow or Wraparound

    The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected Systems

  • debian•linux

    < 5.10.221-1 | < 6.1.94-1 | < 6.9.7-1 | < 6.9.7-1

  • ubuntu•linux

    < 4.15.0-233.245 | < 5.4.0-192.212 | < 5.15.0-121.131 | < 6.8.0-44.44

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    < 4.15.0-1177.190 | < 5.4.0-1130.140 | < 5.15.0-1069.75 | < 6.8.0-1015.16

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1069.75~20.04.1

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1130.140~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-6.5

    all

  • ubuntu•linux-aws-6.8

    < 6.8.0-1015.16~22.04.1

  • ubuntu•linux-aws-fips

    < 4.15.0-2115.121 | all | < 5.4.0-1130.140+fips1 | < 5.15.0-1069.75+fips1

  • ubuntu•linux-aws-hwe

    < 4.15.0-1177.190~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1185.200~14.04.1 | < 4.15.0-1185.200~16.04.1 | all | < 5.4.0-1135.142 | < 5.15.0-1072.81 | < 6.8.0-1014.16

  • ubuntu•linux-azure-4.15

    < 4.15.0-1185.200

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1072.81~20.04.1

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1135.142~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-6.5

    all

  • ubuntu•linux-azure-6.8

    < 6.8.0-1014.16~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | < 5.15.0-1072.81.1

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2094.100 | all | < 5.4.0-1135.142+fips1 | < 5.15.0-1072.81+fips1

  • ubuntu•linux-bluefield

    all | < 5.4.0-1090.97 | < 5.15.0-1052.54

  • ubuntu•linux-fips

    < 4.15.0-1131.142 | all | < 5.4.0-1104.114 | < 5.15.0-121.131+fips1 | < 6.8.0-78.78+fips1

  • ubuntu•linux-gcp

    < 4.15.0-1170.187~16.04.1 | all | < 5.4.0-1134.143 | < 5.15.0-1068.76 | < 6.8.0-1014.16

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1170.187

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1068.76~20.04.1

  • ubuntu•linux-gcp-5.19

    all

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1134.143~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-6.2

    all

  • ubuntu•linux-gcp-6.5

    all

  • ubuntu•linux-gcp-6.8

    < 6.8.0-1014.16~22.04.1

  • ubuntu•linux-gcp-fips

    < 4.15.0-2078.84 | all | < 5.4.0-1134.143+fips1 | < 5.15.0-1068.76+fips1

  • ubuntu•linux-gke

    all | < 5.15.0-1066.72 | < 6.8.0-1010.13

Showing first 50 affected entries in server-rendered view.

References (34)