CVE-2024-46681

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pktgen: use cpus_read_lock() in pg_net_init()

I have seen the WARN_ON(smp_processor_id() != cpu) firing in pktgen_thread_worker() during tests.

We must use cpus_read_lock()/cpus_read_unlock() around the for_each_online_cpu(cpu) loop.

While we are at it use WARN_ON_ONCE() to avoid a possible syslog flood.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1b4fe364b561b952dd7beeba7f7616f9a419b83a; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7eed5b3115ce9e057bf64c3f6be9ea72f8298e4e; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5f5f7366dda8ae870e8305d6e7b3c0c2686cd2cf; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 979b581e4c69257acab1af415ddad6b2d78a2fa5
LinuxLinux2.6.12

References

Timeline

Published
Sep 13, 2024
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-466825.5In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open Prior tCVE-2024-466837.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of theCVE-2024-466845.5In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined CVE-2024-466855.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcs_get_function() CVE-2024-466865.5In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() ThisCVE-2024-466877.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chuCVE-2024-466885.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fCVE-2024-466895.5In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not writCVE-2024-46695.4The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider, Upcoming Events, and CVE-2024-466905.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party leaseCVE-2024-466915.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '932993CVE-2024-466925.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark get_wq_ctx() as atomic call Currently get_wq
CVE-2024-46681: Medium severity, CVSS 5.5 | Vulnix