CVE-2024-39277: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-39277 is a vulnerability in the Linux kernel's DMA mapping benchmark functionality, discovered by the Linux Verification Center (linuxtesting.org). The issue occurs when cpumask_of_node() is called with NUMA_NO_NODE inside do_map_benchmark(), leading to an array-index-out-of-bounds condition. The vulnerability affects multiple versions of the Linux kernel including versions up to 5.11, versions 5.15 to 5.15.161, 6.1 to 6.1.93, 6.6 to 6.6.33, and 6.9 to 6.9.4 (NVD).

The vulnerability manifests as an array-index-out-of-bounds error in ./arch/x86/include/asm/topology.h:72:28, where an index of -1 is attempted to be used with a 'cpumask [64][1]' array type. This occurs when cpumask_of_node() is called with NUMA_NO_NODE parameter, resulting in an invalid array access. The issue was identified through UBSAN (Undefined Behavior Sanitizer) reports. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could potentially lead to system instability or crashes when using the DMA mapping benchmark functionality, particularly in systems utilizing NUMA configurations. The high CVSS score of 7.8 indicates significant potential impact on system confidentiality, integrity, and availability (NVD).

The vulnerability requires local access with low privilege requirements and no user interaction. The attack complexity is rated as low, indicating relatively straightforward exploitation conditions (NVD).

A fix has been implemented that modifies the way cpumask_of_node() is called within the kernel's DMA mapping benchmark functionality. The patch moves the cpumask_of_node() call to the point of use when binding a kernel thread to a cpuset of a particular node, ensuring proper handling of the NUMA_NO_NODE case. Users should update to the patched versions of the Linux kernel (Kernel Patch).