一、漏洞信息

漏洞编号：[CVE-2024-41032](https://nvd.nist.gov/vuln/detail/CVE-2024-41032)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:mm: vmalloc: check if a hash-index is in cpu_possible_maskThe problem is that there are systems where cpu_possible_mask has gapsbetween set CPUs, for example SPARC. In this scenario addr_to_vb_xa()hash function can return an index which accesses to not-possible and notsetup CPU area using per_cpu() macro. This results in an oops on SPARC.A per-cpu vmap_block_queue is also used as hash table, incorrectlyassuming the cpu_possible_mask has no gaps. Fix it by adjusting an indexto a next possible CPU.

漏洞公开时间：2024-07-29 23:15:11

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-41032

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/28acd531c9a365dac01b32e6bc54aed8c1429bcb | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/47f9b6e49b422392fb0e348a65eb925103ba1882 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a34acf30b19bc4ee3ba2f1082756ea2604c19138 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP4(4.19.90):

3.openEuler-22.03-LTS-SP1(5.10.0):

4.openEuler-22.03-LTS-SP3(5.10.0):

5.openEuler-22.03-LTS-SP4(5.10.0):

6.openEuler-24.03-LTS(6.6.0):

7.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.1.0):

2.openEuler-20.03-LTS-SP4(4.19.90):

3.openEuler-22.03-LTS-SP1(5.10.0):

4.openEuler-22.03-LTS-SP3(5.10.0):

5.openEuler-22.03-LTS-SP4(5.10.0):

6.openEuler-24.03-LTS(6.6.0):

7.openEuler-24.03-LTS-Next(6.6.0):