CVE-2024-43889
Description
In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. [ 10.017908] Oops: divide error: 0000 1 PREEMPT SMP NOPTI [ 10.017908] CPU: 26 PID: 2627 Comm: kworker/u1666:1 Not tainted 6.10.0-15.el10.x86_64 #1 [ 10.017908] Hardware name: Lenovo ThinkSystem SR950 [7X12CTO1WW]/[7X12CTO1WW], BIOS [PSE140J-2.30] 07/20/2021 [ 10.017908] Workqueue: events_unbound padata_mt_helper [ 10.017908] RIP: 0010:padata_mt_helper+0x39/0xb0 : [ 10.017963] Call Trace: [ 10.017968] <TASK> [ 10.018004] ? padata_mt_helper+0x39/0xb0 [ 10.018084] process_one_work+0x174/0x330 [ 10.018093] worker_thread+0x266/0x3a0 [ 10.018111] kthread+0xcf/0x100 [ 10.018124] ret_from_fork+0x31/0x50 [ 10.018138] ret_from_fork_asm+0x1a/0x30 [ 10.018147] </TASK> Looking at the padata_mt_helper() function, the only way a divide-by-0 panic can happen is when ps->chunk_size is 0. The way that chunk_size is initialized in padata_do_multithreaded(), chunk_size can be 0 when the min_chunk in the passed-in padata_mt_job structure is 0. Fix this divide-by-0 panic by making sure that chunk_size will be at least 1 no matter what the input parameters are.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2024-8870.html
Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2024:8870
Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2024-8856.html
Vendor advisory: alma — https://bugzilla.redhat.com/2317601
Vendor advisory: alma — https://bugzilla.redhat.com/2315178
Vendor advisory: alma — https://bugzilla.redhat.com/2311715
Vendor advisory: alma — https://bugzilla.redhat.com/2309853
Vendor advisory: alma — https://bugzilla.redhat.com/2309852
Vendor advisory: alma — https://bugzilla.redhat.com/2307892
Vendor advisory: alma — https://bugzilla.redhat.com/2307865
Vendor advisory: alma — https://bugzilla.redhat.com/2307862
Vendor advisory: alma — https://bugzilla.redhat.com/2300517
Vendor advisory: alma — https://bugzilla.redhat.com/2300508
Vendor advisory: alma — https://bugzilla.redhat.com/2300488
Vendor advisory: alma — https://bugzilla.redhat.com/2300487
Vendor advisory: alma — https://bugzilla.redhat.com/2300442
Vendor advisory: alma — https://bugzilla.redhat.com/2300412
Vendor advisory: alma — https://bugzilla.redhat.com/2298412
Vendor advisory: alma — https://bugzilla.redhat.com/2298109
Vendor advisory: alma — https://bugzilla.redhat.com/2297568
Vendor advisory: alma — https://bugzilla.redhat.com/2297567
Vendor advisory: alma — https://bugzilla.redhat.com/2297545
Vendor advisory: alma — https://bugzilla.redhat.com/2297508
Vendor advisory: alma — https://bugzilla.redhat.com/2297475
Vendor advisory: alma — https://bugzilla.redhat.com/2293459
Vendor advisory: alma — https://bugzilla.redhat.com/2293458
Vendor advisory: alma — https://bugzilla.redhat.com/2293402
Vendor advisory: alma — https://bugzilla.redhat.com/2293356
Vendor advisory: alma — https://bugzilla.redhat.com/2281817
Vendor advisory: alma — https://bugzilla.redhat.com/2281669
Vendor advisory: alma — https://bugzilla.redhat.com/2281284
Vendor advisory: alma — https://bugzilla.redhat.com/2278387
Vendor advisory: alma — https://bugzilla.redhat.com/2278350
Vendor advisory: alma — https://bugzilla.redhat.com/2278262
Vendor advisory: alma — https://bugzilla.redhat.com/2277168
Vendor advisory: alma — https://bugzilla.redhat.com/2275750
Vendor advisory: alma — https://bugzilla.redhat.com/2269183
Vendor advisory: alma — https://bugzilla.redhat.com/2266247
Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2024:8856
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2024-43889
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2024-43889.html
Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2024:8856
Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2024:8870
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/da0ffe84fcc1627a7dff82c80b823b94236af905
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/ab8b397d5997d8c37610252528edc54bebf9f6d3
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/a29cfcb848c31f22b4de6a531c3e1d68c9bfe09f
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/924f788c906dccaca30acab86c7124371e1d6f2c
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/8f5ffd2af7274853ff91d6cd62541191d9fbd10d
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/6d45e1c948a8b7ed6ceddb14319af69424db730c
Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2025:6966
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| rocky | 8 | fixed | |
| sles | affected | | |
| debian | bookworm | fixed | 6.1.106-1 |
| debian | bullseye | fixed | 5.10.226-1 |
| debian | forky | fixed | 6.10.6-1 |
| debian | sid | fixed | 6.10.6-1 |
| debian | trixie | fixed | 6.10.6-1 |
| linux-kernel | affected | 5.10.224 | |
| linux-kernel | 6.11 | affected | |
| almalinux | 8 | fixed | kernel-doc-4.18.0-553.27.1.el8_10.noarch.rpm |
References
- https://access.redhat.com/errata/RHSA-2025:6966
- https://git.kernel.org/stable/c/6d45e1c948a8b7ed6ceddb14319af69424db730c
- https://git.kernel.org/stable/c/8f5ffd2af7274853ff91d6cd62541191d9fbd10d
- https://git.kernel.org/stable/c/924f788c906dccaca30acab86c7124371e1d6f2c
- https://git.kernel.org/stable/c/a29cfcb848c31f22b4de6a531c3e1d68c9bfe09f
- https://git.kernel.org/stable/c/ab8b397d5997d8c37610252528edc54bebf9f6d3
- https://git.kernel.org/stable/c/da0ffe84fcc1627a7dff82c80b823b94236af905
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://errata.rockylinux.org/RLSA-2024:8870
- https://errata.rockylinux.org/RLSA-2024:8856
- https://www.suse.com/security/cve/CVE-2024-43889.html
- https://security-tracker.debian.org/tracker/CVE-2024-43889
- https://access.redhat.com/errata/RHSA-2024:8856
- https://bugzilla.redhat.com/2266247
- https://bugzilla.redhat.com/2269183
- https://bugzilla.redhat.com/2275750
- https://bugzilla.redhat.com/2277168
- https://bugzilla.redhat.com/2278262
- https://bugzilla.redhat.com/2278350
- https://bugzilla.redhat.com/2278387
- https://bugzilla.redhat.com/2281284
CWEs
CWE-369
Verify integrity in audit chain (admin only). AS-IS.