CVE-2024-56768: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-56768 affects the Linux kernel's BPF (Berkeley Packet Filter) subsystem, specifically the bpfgetsmpprocessorid() function when CONFIG_SMP is disabled. The vulnerability was discovered in January 2024 and affects Linux kernel versions from 6.10 up to (excluding) 6.12.8, as well as versions 6.13-rc1 through 6.13-rc3 (NVD).

The vulnerability occurs on x86-64 systems when calling bpfgetsmpprocessorid() in a kernel with CONFIGSMP disabled. This triggers a page fault due to the unavailability of pcpuhot, resulting in a kernel bug with error messages indicating a supervisor read access failure in kernel mode and a not-present page error. The CVSS v3.1 base score is 5.5 (Medium) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, the vulnerability causes a kernel page fault that can lead to system instability or crashes. This primarily affects the availability of the system, as indicated by the CVSS metrics showing high impact on availability but no impact on confidentiality or integrity (NVD).

The vulnerability has been patched by inlining a return 0 in the !CONFIGSMP case. The fix was implemented through kernel patches that modify the kernel/bpf/verifier.c file to properly handle the CONFIGSMP disabled scenario (Kernel Patch).