CVE-2024-48876 Details
Description
In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stack_depot_save_flags() in NMI context Per documentation, stack_depot_save_flags() was meant to be usable from NMI context if STACK_DEPOT_FLAG_CAN_ALLOC is unset. However, it still would try to take the pool_lock in an attempt to save a stack trace in the current pool (if space is available). This could result in deadlock if an NMI is handled while pool_lock is already held. To avoid deadlock, only try to take the lock in NMI context and give up if unsuccessful. The documentation is fixed to clearly convey this.
A vulnerability in the Linux kernel's stack depot management could lead to a deadlock when handling Non-Maskable Interrupts (NMI). The issue arises in the 'stack_depot_save_flags()' function, which was intended to be used in NMI context without the 'STACK_DEPOT_FLAG_CAN_ALLOC' flag. However, the function still attempted to acquire the 'pool_lock' to save a stack trace, potentially causing a deadlock if an NMI occurred while the lock was held. The vulnerability has been addressed by modifying the function to only attempt to acquire the lock in NMI context and to relinquish the effort if unsuccessful. Additionally, the documentation has been updated for clarity.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/031e04bdc834cda3b054ef6b698503b2b97e8186 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9bfeeeff2c92b9dd261198b601b45bde4c529841 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8.1, < 6.12.5 6.8 - 6.8 rc3 6.8 rc4 6.8 rc5 6.8 rc6 6.8 rc7 6.13 rc1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Sep 23, 2025 | Initial Analysis | [email protected] |
| Jan 11, 2025 | New CVE Received | kernel.org |