CVE-2024-39277

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description The issue is related to the do map benchmark() function in the Linux kernel, which can cause an array-index-out-of-bounds error when cpumask of node() is called for NUMA NO NODE inside do map benchmark(). This results in a sanitizer report indicating an index out of range for type 'cpumask [64][1]'. The error occurs when binding a kernel thread to a cpuset of a particular node, and the provided node id is checked inside map benchmark ioctl(). The NUMA NO NODE case is not handled properly later, leading to the error.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the do map benchmark() function until a patch is available. Restrict access to the vulnerable map benchmark ioctl() API endpoint to minimize the risk of exploitation. Avoid using the cpumask of node() function with NUMA NO NODE until the issue is resolved.