CVE-2024-36888

6.2 · MEDIUM

Published May 30, 2024 linux CWE-476 EPSS 0.24% (15th pctl) CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-36888 is a medium-severity vulnerability affecting linux linux_kernel. It was published on May 30, 2024 and has a CVSS 3.1 base score of 6.2 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 6.2, rated MEDIUM. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

workqueue: Fix selection of wake_cpu in kick_pool()

With cpu_possible_mask=0-63 and cpu_online_mask=0-7 the following

kernel oops was observed:

smp: Bringing up secondary CPUs ...

smp: Brought up 1 node, 8 CPUs

Unable to handle kernel pointer dereference in virtual kernel address space

Failing address: 0000000000000000 TEID: 0000000000000803

[..]

Call Trace:

arch_vcpu_is_preempted+0x12/0x80

select_idle_sibling+0x42/0x560

select_task_rq_fair+0x29a/0x3b0

try_to_wake_up+0x38e/0x6e0

kick_pool+0xa4/0x198

__queue_work.part.0+0x2bc/0x3a8

call_timer_fn+0x36/0x160

__run_timers+0x1e2/0x328

__run_timer_base+0x5a/0x88

run_timer_softirq+0x40/0x78

__do_softirq+0x118/0x388

irq_exit_rcu+0xc0/0xd8

do_ext_irq+0xae/0x168

ext_int_handler+0xbe/0xf0

psw_idle_exit+0x0/0xc

default_idle_call+0x3c/0x110

do_idle+0xd4/0x158

cpu_startup_entry+0x40/0x48

rest_init+0xc6/0xc8

start_kernel+0x3c4/0x5e0

startup_continue+0x3c/0x50

The crash is caused

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 6.6, < 6.6.31	Affected

References

Ref git.kernel.org/stable/c/57a01eafdcf78f6da34fad9ff075ed5dfdd9f420 Ref git.kernel.org/stable/c/6d559e70b3eb6623935cbe7f94c1912c1099777b Ref git.kernel.org/stable/c/c57824d4fe07c2131f8c48687cbd5ee2be60c767 Ref git.kernel.org/stable/c/57a01eafdcf78f6da34fad9ff075ed5dfdd9f420 Ref git.kernel.org/stable/c/6d559e70b3eb6623935cbe7f94c1912c1099777b Ref git.kernel.org/stable/c/c57824d4fe07c2131f8c48687cbd5ee2be60c767

Frequently Asked Questions

What is CVE-2024-36888?

CVE-2024-36888 is a medium-severity vulnerability affecting linux linux_kernel. It was published on May 30, 2024 and has a CVSS 3.1 base score of 6.2 (MEDIUM).

How severe is CVE-2024-36888?

This vulnerability has a CVSS 3.1 base score of 6.2, rated MEDIUM. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.

How do I fix or remediate CVE-2024-36888?

How can CyberStrike help with CVE-2024-36888?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-36888 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719