CVE-2024-38561

kunit: Fix kthread reference

HIGH

CVSS Score

Published: June 19, 2024 at 01:35 PM UTC

Updated: June 17, 2026 at 07:40 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the deadline and before the call to kthread_stop(), which may lead to use after free.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.18 ≤ v < 6.1.935.18 ≤ v < 6.105.18 ≤ v < 6.6.335.18 ≤ v < 6.8.125.18 ≤ v < 6.9.36.2 ≤ v < 6.6.336.7 ≤ v < 6.8.126.9 ≤ v < 6.9.35.18adf505457032c11b79b5a7c277c62ff5d61b17c2

Vendor states this is fixed in 1ec7ccb4cd4b6f72c2998b07880fa7aaf8dfe1d4 (fixed)

Vendor states this is fixed in 1f2ebd3758e1cef6a1f998a1f7ea73310dcb1699 (fixed)

Vendor states this is fixed in 8f5c841a559ccb700c8d27a3ca645b7a5f59b4f5 (fixed)

Vendor states this is fixed in b0b755cb5a5e0d7168c3ab1b3814b0d3cad9f017 (fixed)

Vendor states this is fixed in f8aa1b98ce40184521ed95ec26cc115a255183b2 (fixed)

Vendor states this is fixed in 5.18 (unaffected)

Vendor states this is fixed in 6.1.93 (unaffected)

Vendor states this is fixed in 6.10 (unaffected)

Vendor states this is fixed in 6.6.33 (unaffected)

Vendor states this is fixed in 6.8.12 (unaffected)

Vendor states this is fixed in 6.9.3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references