CVE-2024-38613

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a spinlock race in kernel thread creation. Context switching retains the correct lock owner across the switch from 'prev' to 'next' tasks, relying on interrupts remaining disabled for the entire duration of the switch. However, for newly created kernel threads, the status register is set to PS S in copy thread(), which leaves the IPL at 0, and upon restoring the 'next' thread's status register in switch to() aka resume(), interrupts become enabled prematurely. This causes a spinlock recursion warning as reported by Guenter Roeck. The race has been opened in commit 533e6903bea0 ("m68k: split ret from fork(), simplify kernel thread()").

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.