CVE-2024-56550: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-56550 is a vulnerability discovered in the Linux kernel's S390 stack trace component, specifically in the arch_stack_walk_user_common() function. The vulnerability was disclosed on December 27, 2024, and involves a logic error where a return statement is incorrectly used instead of a break statement when store_ip() fails while storing a callchain entry of a user space process (Red Hat XML, NVD).

The vulnerability exists in the arch_stack_walk_user_common() function of the Linux kernel's S390 stack trace component. The issue stems from a logic error where a return statement is used instead of a break statement in the code path handling store_ip() failures. This vulnerability has been assigned a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating moderate severity (Red Hat XML).

The vulnerability can lead to a missing pagefault_enable() call. When this occurs, any subsequent page fault of the affected process won't be resolved by the page fault handler, ultimately resulting in the termination of the process (Kernel Git).

The vulnerability has been fixed by replacing the return statement with a break statement in the affected code. The fix has been implemented in the Linux kernel, and the patch is available in the kernel repository (Kernel Git).