CVE-2024-50019

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: The issue arises when calling kthread stop() on an unparked per-cpu kthread, triggering a warning due to the kthread bind() function expecting the task to be inactive and in TASK PARKED state. This warning occurs because the wake-up call is ignored when the target is not in TASK PARKED state, but for per CPU kthreads, the wake-up is preceded by a call to kthread bind(), which expects the task to be inactive and in TASK PARKED state.

Recommendations: To resolve the issue, update to Linux kernel version 6.6.58 or later. As a temporary workaround, consider disabling the kthread stop() function for per-cpu kthreads until a patch is available. Restrict access to the vulnerable kthread bind() function to minimize the risk of exploitation. Avoid using the kthread stop() function on unparked per-cpu kthreads until the issue is resolved.