CVE-2024-57885

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm/kmemleak: fix sleeping function called from invalid context at print message

Address a bug in the kernel that triggers a "sleeping function called from

invalid context" warning when /sys/kernel/debug/kmemleak is printed under

specific conditions:

- CONFIG_PREEMPT_RT=y

- Set SELinux as the LSM for the system

- Set kptr_restrict to 1

- kmemleak buffer contains at least one item

BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48

in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 136, name: cat

preempt_count: 1, expected: 0

RCU nest depth: 2, expected: 2

6 locks held by cat/136:

#0: ffff32e64bcbf950 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb8/0xe30

#1: ffffafe6aaa9dea0 (scan_mutex){+.+.}-{3:3}, at: kmemleak_seq_start+0x34/0x128

#3: ffff32e6546b1cd0 (&object->lock){....}-{2:2}, at: kmemleak_seq_show+0x3c/0x1e0

#4: ffffafe6aa8d8560 (rcu_read_lock){....}-{1:2}, at: has_ns_ca

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References