{
  "cveId": "CVE-2024-44959",
  "url": "https://patchblox.com/security/cve/CVE-2024-44959",
  "summary": "CVE-2024-44959 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-44959, released September 4, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tracefs: Use generic inode RCU for synchronizing...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  tracefs: Use generic inode RCU for synchronizing freeing  With structure layout randomization enabled for \u0027struct inode\u0027 we need to avoid overlapping any of the RCU-used / initialized-only-once members, e.g. i_lru or i_sb_list to not corrupt related list traversals when making use of the rcu_head.  For an unlucky structure layout of \u0027struct inode\u0027 we may end up with the following splat when running the ftrace selftests:  [\u003C...\u003E] list_del corruption, ffff888103ee2cb0-\u003Enext (tracefs_inode_cache\u002B0x0/0x4e0 [slab object]) is NULL (prev is tracefs_inode_cache\u002B0x78/0x4e0 [slab object]) [\u003C...\u003E] ------------[ cut here ]------------ [\u003C...\u003E] kernel BUG at lib/list_debug.c:54! [\u003C...\u003E] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [\u003C...\u003E] CPU: 3 PID: 2550 Comm: mount Tainted: G                 N  6.8.12-grsec\u002B #122 ed2f536ca62f28b087b90e3cc906a8d25b3ddc65 [\u003C...\u003E] Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS 1.14.0-2 04/01/2014 [\u003C...\u003E] RIP: 0010:[\u003Cffffffff84656018\u003E] __list_del_entry_valid_or_report\u002B0x138/0x3e0 [\u003C...\u003E] Code: 48 b8 99 fb 65 f2 ff ff ff ff e9 03 5c d9 fc cc 48 b8 99 fb 65 f2 ff ff ff ff e9 33 5a d9 fc cc 48 b8 99 fb 65 f2 ff ff ff ff \u003C0f\u003E 0b 4c 89 e9 48 89 ea 48 89 ee 48 c7 c7 60 8f dd 89 31 c0 e8 2f [\u003C...\u003E] RSP: 0018:fffffe80416afaf0 EFLAGS: 00010283 [\u003C...\u003E] RAX: 0000000000000098 RBX: ffff888103ee2cb0 RCX: 0000000000000000 [\u003C...\u003E] RDX: ffffffff84655fe8 RSI: ffffffff89dd8b60 RDI: 0000000000000001 [\u003C...\u003E] RBP: ffff888103ee2cb0 R08: 0000000000000001 R09: fffffbd0082d5f25 [\u003C...\u003E] R10: fffffe80416af92f R11: 0000000000000001 R12: fdf99c16731d9b6d [\u003C...\u003E] R13: 0000000000000000 R14: ffff88819ad4b8b8 R15: 0000000000000000 [\u003C...\u003E] RBX: tracefs_inode_cache\u002B0x0/0x4e0 [slab object] [\u003C...\u003E] RDX: __list_del_entry_valid_or_report\u002B0x108/0x3e0 [\u003C...\u003E] RSI: __func__.47\u002B0x4340/0x4400 [\u003C...\u003E] RBP: tracefs_inode_cache\u002B0x0/0x4e0 [slab object] [\u003C...\u003E] RSP: process kstack fffffe80416afaf0\u002B0x7af0/0x8000 [mount 2550 2550] [\u003C...\u003E] R09: kasan shadow of process kstack fffffe80416af928\u002B0x7928/0x8000 [mount 2550 2550] [\u003C...\u003E] R10: process kstack fffffe80416af92f\u002B0x792f/0x8000 [mount 2550 2550] [\u003C...\u003E] R14: tracefs_inode_cache\u002B0x78/0x4e0 [slab object] [\u003C...\u003E] FS:  00006dcb380c1840(0000) GS:ffff8881e0600000(0000) knlGS:0000000000000000 [\u003C...\u003E] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [\u003C...\u003E] CR2: 000076ab72b30e84 CR3: 000000000b088004 CR4: 0000000000360ef0 shadow CR4: 0000000000360ef0 [\u003C...\u003E] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [\u003C...\u003E] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [\u003C...\u003E] ASID: 0003 [\u003C...\u003E] Stack: [\u003C...\u003E]  ffffffff818a2315 00000000f5c856ee ffffffff896f1840 ffff888103ee2cb0 [\u003C...\u003E]  ffff88812b6b9750 0000000079d714b6 fffffbfff1e9280b ffffffff8f49405f [\u003C...\u003E]  0000000000000001 0000000000000000 ffff888104457280 ffffffff8248b392 [\u003C...\u003E] Call Trace: [\u003C...\u003E]  \u003CTASK\u003E [\u003C...\u003E]  [\u003Cffffffff818a2315\u003E] ? lock_release\u002B0x175/0x380 fffffe80416afaf0 [\u003C...\u003E]  [\u003Cffffffff8248b392\u003E] list_lru_del\u002B0x152/0x740 fffffe80416afb48 [\u003C...\u003E]  [\u003Cffffffff8248ba93\u003E] list_lru_del_obj\u002B0x113/0x280 fffffe80416afb88 [\u003C...\u003E]  [\u003Cffffffff8940fd19\u003E] ? _atomic_dec_and_lock\u002B0x119/0x200 fffffe80416afb90 [\u003C...\u003E]  [\u003Cffffffff8295b244\u003E] iput_final\u002B0x1c4/0x9a0 fffffe80416afbb8 [\u003C...\u003E]  [\u003Cffffffff8293a52b\u003E] dentry_unlink_inode\u002B0x44b/0xaa0 fffffe80416afbf8 [\u003C...\u003E]  [\u003Cffffffff8293fefc\u003E] __dentry_kill\u002B0x23c/0xf00 fffffe80416afc40 [\u003C...\u003E]  [\u003Cffffffff8953a85f\u003E] ? __this_cpu_preempt_check\u002B0x1f/0xa0 fffffe80416afc48 [\u003C...\u003E]  [\u003Cffffffff82949ce5\u003E] ? shrink_dentry_list\u002B0x1c5/0x760 fffffe80416afc70 [\u003C...\u003E]  [\u003Cffffffff82949b71\u003E] ? shrink_dentry_list\u002B0x51/0x760 fffffe80416afc78 [\u003C...\u003E]  [\u003Cffffffff82949da8\u003E] shrink_dentry_list\u002B0x288/0x760 fffffe80416afc80 [\u003C...\u003E]  [\u003Cffffffff8294ae75\u003E] shrink_dcache_sb\u002B0x155/0x420 fffffe80416afcc8 [\u003C...\u003E]  [\u003Cffffffff8953a7c3\u003E] ? debug_smp_processor_id\u002B0x23/0xa0 fffffe80416afce0 [\u003C...\u003E]  [\u003Cffffffff8294ad20\u003E] ? do_one_tre ---truncated---",
  "published": "2024-09-04T19:15:30Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00221,
  "epssPercentile": 0.12714,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-44959",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-44959",
      "released": "2024-09-04T19:15:30Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.10.6-1",
      "fix": "DEBIAN-CVE-2024-44959",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-44959",
      "released": "2024-09-04T19:15:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}