Red Hat: CVE-2024-35983: kernel: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Multiple Advisories)

Red Hat: CVE-2024-35983: kernel: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

05/20/2024

Created

12/06/2024

Added

12/05/2024

Modified

12/05/2024

Description

In the Linux kernel, the following vulnerability has been resolved: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS bits_per() rounds up to the next power of two when passed a power of two.This causes crashes on some machines and configurations.

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2024-35983
• RHSA-2024:9315