Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-40944 Details

Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by load_segments() and GS_BASE is now 0 but call depth tracking uses per-CPU variables to operate. Call cc_platform_has() earlier in the function when GS is still valid. [ bp: Massage. ]

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/2cfb464669b645a9b98478b74f2bcea9860dcff1 kernel.orgPatch
https://git.kernel.org/stable/c/93c1800b3799f17375989b0daf76497dd3e80922 kernel.orgPatch
https://git.kernel.org/stable/c/d91ddd05082691e69b30744825d18ae799293258 kernel.orgPatch
https://git.kernel.org/stable/c/2cfb464669b645a9b98478b74f2bcea9860dcff1 CVEPatch
https://git.kernel.org/stable/c/93c1800b3799f17375989b0daf76497dd3e80922 CVEPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.2, < 6.6.35
>= 6.7, < 6.9.6
6.10 rc1
6.10 rc2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-40944
NVD Published Date:
Jul 12, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-40944 Details - Not Deferred