What’s Vulnerable › Vulnerabilities

CVE-2024-56550: s390/stacktrace: Use break instead of return statement

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-27 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: s390/stacktrace: Use break instead of return statement arch_stack_walk_user_common() contains a return statement instead of a break statement in case store_ip() fails while trying to store a callchain entry of a user space process. This may lead to a missing pagefault_enable() call. If this happens any subsequent page fault of the process won't be resolved by the page fault handler and this in turn will lead to the process being killed. Use a break instead of a return statement to fix this.

Affected products

• Linux kernel: from 6.9.4 before 6.10; from 6.10 before 6.12.4 — fixed in 6.10, 6.12.4

How to fix

Upgrade to a fixed version: Linux kernel 6.10, 6.12.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/20c26357826457dc7c8145297e60ddc012e18914
• https://git.kernel.org/stable/c/588a9836a4ef7ec3bfcffda526dfa399637e6cfc

Get alerted when CVE-2024-56550 or the next vulnerability affects your stack