5.5

CVE-2024-41068: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-41068DEBIAN-CVE-2024-41068
Published 29-07-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-41068 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 36 · Related 32
DLA-4008-1DSA-5747-1MGASA-2024-0277MGASA-2024-0278SUSE-SU-2024:3189-1SUSE-SU-2024:3190-1

Timeline

  1. 29-07-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix sclp_init() cleanup on failure If sclp_init() fails it only partially cleans up: if there are multiple failing calls to sclp_init() sclp_state_change_event will be added several times to sclp_reg_list, which results in the following warning: ------------[ cut here ]------------ list_add double add: new=000003ffe1598c10, prev=000003ffe1598bf0, next=000003ffe1598c10. WARNING: CPU: 0 PID: 1 at lib/list_debug.c:35 __list_add_valid_or_report+0xde/0xf8 CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.10.0-rc3 Krnl PSW : 0404c00180000000 000003ffe0d6076a (__list_add_valid_or_report+0xe2/0xf8) R:0 T:1 IO:0 EX:0 Key:0 M:1 W:0 P:0 AS:3 CC:0 PM:0 RI:0 EA:3 ... Call Trace: [<000003ffe0d6076a>] __list_add_valid_or_report+0xe2/0xf8 ([<000003ffe0d60766>] __list_add_valid_or_report+0xde/0xf8) [<000003ffe0a8d37e>] sclp_init+0x40e/0x450 [<000003ffe00009f2>] do_one_initcall+0x42/0x1e0 [<000003ffe15b77a6>] do_initcalls+0x126/0x150 [<000003ffe15b7a0a>] kernel_init_freeable+0x1ba/0x1f8 [<000003ffe0d6650e>] kernel_init+0x2e/0x180 [<000003ffe000301c>] __ret_from_fork+0x3c/0x60 [<000003ffe0d759ca>] ret_from_fork+0xa/0x30 Fix this by removing sclp_state_change_event from sclp_reg_list when sclp_init() fails.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu130 products
  • linuxAll versions (No fix recorded) | < 5.4.0-200.220 | < 5.15.0-125.135 | < 6.8.0-48.48
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1135.145 | < 5.15.0-1072.78 | < 6.8.0-1018.20
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 8bc00c04d87ee151fb8fe18ed7e7af8c785843f2, < cf521049fcd07071ed42dc9758fce7d5ee120ec6 | ≥ 8bc00c04d87ee151fb8fe18ed7e7af8c785843f2, < 79b4be70d5a160969b805f638ac5b4efd0aac7a3 | ≥ 8bc00c04d87ee151fb8fe18ed7e7af8c785843f2, < 0a31b3fdc7e735c4f8c65fe4339945c717ed6808 | ≥ 8bc00c04d87ee151fb8fe18ed7e7af8c785843f2, < be0259796d0b76bbc7461e12c186814a9e58244c | ≥ 8bc00c04d87ee151fb8fe18ed7e7af8c785843f2, < 6434b33faaa063df500af355ee6c3942e0f8d982 | 5.13
  • linux_kernel< 4.19.319 | ≥ 4.20, < 5.4.281 | ≥ 5.5, < 5.10.223 | ≥ 5.11, < 5.15.164 | ≥ 5.16, < 6.1.101 | ≥ 6.2, < 6.6.42 | ≥ 6.7, < 6.9.11 | 6.10:rc1 | 6.10:rc2 | 6.10:rc3 | 6.10:rc4 | 6.10:rc5
Debian1 product
  • linux< 6.1.106-1 | < 6.9.11-1

3 vendors · 133 products

References

34 links
Show all 34 references