{"id":"DEBIAN-CVE-2024-50133","details":"In the Linux kernel, the following vulnerability has been resolved:  LoongArch: Don't crash in stack_top() for tasks without vDSO  Not all tasks have a vDSO mapped, for example kthreads never do. If such a task ever ends up calling stack_top(), it will derefence the NULL vdso pointer and crash.  This can for example happen when using kunit:  \t[\u003c9000000000203874\u003e] stack_top+0x58/0xa8 \t[\u003c90000000002956cc\u003e] arch_pick_mmap_layout+0x164/0x220 \t[\u003c90000000003c284c\u003e] kunit_vm_mmap_init+0x108/0x12c \t[\u003c90000000003c1fbc\u003e] __kunit_add_resource+0x38/0x8c \t[\u003c90000000003c2704\u003e] kunit_vm_mmap+0x88/0xc8 \t[\u003c9000000000410b14\u003e] usercopy_test_init+0xbc/0x25c \t[\u003c90000000003c1db4\u003e] kunit_try_run_case+0x5c/0x184 \t[\u003c90000000003c3d54\u003e] kunit_generic_run_threadfn_adapter+0x24/0x48 \t[\u003c900000000022e4bc\u003e] kthread+0xc8/0xd4 \t[\u003c9000000000200ce8\u003e] ret_from_kernel_thread+0xc/0xa4","modified":"2026-09-15T09:03:15.434935691Z","published":"2024-11-05T18:15:16.030Z","upstream":["CVE-2024-50133"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-50133"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.115-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-50133.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-50133.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-50133.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}