CVE Database
/

CVE-2024-38618

Back to search

CVE-2024-38618

Published: Jun 19, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to an unexpected RCU stall, where the callback repeatedly queuing the expire update, as reported by fuzzer. This patch introduces a sanity check of the timer start tick time, so that the system returns an error when a too small start size is set. As of this patch, the lower limit is hard-coded to 100us, which is small enough but can still work somehow.

VendorProductVersions

Linux

Linux

affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 - < 68396c825c43664b20a3a1ba546844deb2b4e48f
affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 - < 74bfb8d90f2601718ae203faf45a196844c01fa1
affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 - < bdd0aa055b8ec7e24bbc19513f3231958741d0ab
affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 - < 83f0ba8592b9e258fd80ac6486510ab1dcd7ad6e
affected
bbaf5e97337287479eb78dbc3822d9560bbfd2e2 - < ceab795a67dd28dd942d0d8bba648c6c0f7a044b

+3 more versions

Linux

Linux

affected
2.6.29
unaffected
0 - < 2.6.29
unaffected
4.19.316 - <= 4.19.*
unaffected
5.4.278 - <= 5.4.*
unaffected
5.10.219 - <= 5.10.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now