CVE-2024-48876

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stack_depot_save_flags() in NMI context Per documentation, stack_depot_save_flags() was meant to be usable from NMI context if STACK_DEPOT_FLAG_CAN_ALLOC is unset. However, it still would try to take the pool_lock in an attempt to save a stack trace in the current pool (if space is available). This could result in deadlock if an NMI is handled while pool_lock is already held. To avoid deadlock, only try to take the lock in NMI context and give up if unsuccessful. The documentation is fixed to clearly convey this.

• CWE-667

• https://git.kernel.org/stable/c/031e04bdc834cda3b054ef6b698503b2b97e8186Patch
• https://git.kernel.org/stable/c/9bfeeeff2c92b9dd261198b601b45bde4c529841Patch

Published

Jan 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48870Sharp and Toshiba Tec MFPs improperly validate input data in…4.8
• CVE-2024-48871The affected product is vulnerable to a stack-based buffer o…9.8
• CVE-2024-48872Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11…4.8
• CVE-2024-48873In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-48874Ruijie Reyee OS versions 2.206.x up to but not including 2.3…9.8
• CVE-2024-48875In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-48877A memory corruption vulnerability exists in the Shared Strin…7.8
• CVE-2024-48878Zohocorp ManageEngine ADManager Plus versions 7241 and prior…8.8
• CVE-2024-4888BerriAI's litellm, in its latest version, is vulnerable to a…8.1
• CVE-2024-48881In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-48882A denial of service vulnerability exists in the Modbus TCP f…7.5
• CVE-2024-48883An issue was discovered in Samsung Mobile Processor, Wearabl…4.3