跳转到帖子

Huawei EulerOS: CVE-2024-49954: kernel security update

recommended_posts

发布于
  • Members

Huawei EulerOS: CVE-2024-49954: kernel security update

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
10/21/2024
Created
02/12/2025
Added
02/11/2025
Modified
02/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when memory allocation fails in __static_call_add_module(). That's not really justified, because the failure case must be correctly handled by the well known call chain and the error code is passed through to the initiating userspace application. A memory allocation fail is not a fatal problem, but the WARN_ON() takes the machine out when panic_on_warn is set. Replace it with a pr_warn().

Solution(s)

  • huawei-euleros-2_0_sp12-upgrade-bpftool
  • huawei-euleros-2_0_sp12-upgrade-kernel
  • huawei-euleros-2_0_sp12-upgrade-kernel-abi-stablelists
  • huawei-euleros-2_0_sp12-upgrade-kernel-tools
  • huawei-euleros-2_0_sp12-upgrade-kernel-tools-libs
  • huawei-euleros-2_0_sp12-upgrade-python3-perf

References

  • https://attackerkb.com/topics/cve-2024-49954
  • CVE - 2024-49954
  • EulerOS-SA-2025-1192
  • 查看数 693
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…