{"id":"CVE-2024-26645","revision":null,"records":[{"revision":"16dd737649fb4b558d2c368a5b4a9951","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-26645","aliases":[],"title":"tracing: Ensure visibility when inserting an element into tracing_map","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Ensure visibility when inserting an element into tracing_map\n\nRunning the following two commands in parallel on a multi-processor\nAArch64 machine can sporadically produce an unexpected warning about\nduplicate histogram entries:\n\n $ while true; do\n echo hist:key=id.syscall:val=hitcount > \\\n /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/trigger\n cat /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/hist\n sleep 0.001\n done\n $ stress-ng --sysbadaddr $(nproc)\n\nThe warning looks as follows:\n\n[ 2911.172474] ------------[ cut here ]------------\n[ 2911.173111] Duplicates detected: 1\n[ 2911.173574] WARNING: CPU: 2 PID: 12247 at kernel/trace/tracing_map.c:983 tracing_map_sort_entries+0x3e0/0x408\n[ 2911.174702] Modules linked in: iscsi_ibft(E) iscsi_boot_sysfs(E) rfkill(E) af_packet(E) nls_iso8859_1(E) nls_cp437(E) vfat(E) fat(E) ena(E) tiny_power_button(E) qemu_fw_cfg(E) button(E) fuse(E) efi_pstore(E) ip_tables(E) x_tables(E) xfs(E) libcrc32c(E) aes_ce_blk(E) aes_ce_cipher(E) crct10dif_ce(E) polyval_ce(E) polyval_generic(E) ghash_ce(E) gf128mul(E) sm4_ce_gcm(E) sm4_ce_ccm(E) sm4_ce(E) sm4_ce_cipher(E) sm4(E) sm3_ce(E) sm3(E) sha3_ce(E) sha512_ce(E) sha512_arm64(E) sha2_ce(E) sha256_arm64(E) nvme(E) sha1_ce(E) nvme_core(E) nvme_auth(E) t10_pi(E) sg(E) scsi_mod(E) scsi_common(E) efivarfs(E)\n[ 2911.174738] Unloaded tainted modules: cppc_cpufreq(E):1\n[ 2911.180985] CPU: 2 PID: 12247 Comm: cat Kdump: loaded Tainted: G E 6.7.0-default #2 1b58bbb22c97e4399dc09f92d309344f69c44a01\n[ 2911.182398] Hardware name: Amazon EC2 c7g.8xlarge/, BIOS 1.0 11/1/2018\n[ 2911.183208] pstate: 61400005 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n[ 2911.184038] pc : tracing_map_sort_entries+0x3e0/0x408\n[ 2911.184667] lr : tracing_map_sort_entries+0x3e0/0x408\n[ 2911.185310] sp : ffff8000a1513900\n[ 2911.185750] x29: ffff8000a1513900 x28: ffff0003f272fe80 x27: 0000000000000001\n[ 2911.186600] x26: ffff0003f272fe80 x25: 0000000000000030 x24: 0000000000000008\n[ 2911.187458] x23: ffff0003c5788000 x22: ffff0003c16710c8 x21: ffff80008017f180\n[ 2911.188310] x20: ffff80008017f000 x19: ffff80008017f180 x18: ffffffffffffffff\n[ 2911.189160] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000a15134b8\n[ 2911.190015] x14: 0000000000000000 x13: 205d373432323154 x12: 5b5d313131333731\n[ 2911.190844] x11: 00000000fffeffff x10: 00000000fffeffff x9 : ffffd1b78274a13c\n[ 2911.191716] x8 : 000000000017ffe8 x7 : c0000000fffeffff x6 : 000000000057ffa8\n[ 2911.192554] x5 : ffff0012f6c24ec0 x4 : 0000000000000000 x3 : ffff2e5b72b5d000\n[ 2911.193404] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0003ff254480\n[ 2911.194259] Call trace:\n[ 2911.194626] tracing_map_sort_entries+0x3e0/0x408\n[ 2911.195220] hist_show+0x124/0x800\n[ 2911.195692] seq_read_iter+0x1d4/0x4e8\n[ 2911.196193] seq_read+0xe8/0x138\n[ 2911.196638] vfs_read+0xc8/0x300\n[ 2911.197078] ksys_read+0x70/0x108\n[ 2911.197534] __arm64_sys_read+0x24/0x38\n[ 2911.198046] invoke_syscall+0x78/0x108\n[ 2911.198553] el0_svc_common.constprop.0+0xd0/0xf8\n[ 2911.199157] do_el0_svc+0x28/0x40\n[ 2911.199613] el0_svc+0x40/0x178\n[ 2911.200048] el0t_64_sync_handler+0x13c/0x158\n[ 2911.200621] el0t_64_sync+0x1a8/0x1b0\n[ 2911.201115] ---[ end trace 0000000000000000 ]---\n\nThe problem appears to be caused by CPU reordering of writes issued from\n__tracing_map_insert().\n\nThe check for the presence of an element with a given key in this\nfunction is:\n\n val = READ_ONCE(entry->val);\n if (val && keys_match(key, val->key, map->key_size)) ...\n\nThe write of a new entry is:\n\n elt = get_free_elt(map);\n memcpy(elt->key, key, map->key_size);\n entry->val = elt;\n\nThe \"memcpy(elt->key, key, map->key_size);\" and \"entry->val = elt;\"\nstores may become visible in the reversed order on another CPU. This\nsecond CPU might then incorrectly determine that a new key doesn't match\nan already present val->key and subse\n---truncated---","state":0,"publishedAt":"2024-03-26T15:17:18.203+00:00","modifiedAt":"2026-10-15T00:38:21.768+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"product\": \"Linux\",\n \"vendor\": \"Linux\",\n \"defaultStatus\": \"unaffected\",\n \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n \"programFiles\": [\n \"kernel/trace/tracing_map.c\"\n ],\n \"versions\": [\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"5022b331c041e8c54b9a6a3251579bd1e8c0fc0b\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"dad9b28f675ed99b4dec261db2a397efeb80b74c\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"ef70dfa0b1e5084f32635156c9a5c795352ad860\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"aef1cb00856ccfd614467cfb50b791278992e177\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"f4f7e696db0274ff560482cc52eddbf0551d4b7a\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"a1eebe76e187dbe11ca299f8dbb6e45d5b1889e7\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"bf4aeff7da85c3becd39fb73bac94122331c30fb\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n },\n {\n \"version\": \"c193707dde77ace92a649cd59a17e105e2fbeaef\",\n \"lessThan\": \"2b44760609e9eaafc9d234a6883d042fc21132a7\",\n \"status\": \"affected\",\n \"versionType\": \"git\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"product\": \"Linux\",\n \"vendor\": \"Linux\",\n \"defaultStatus\": \"affected\",\n \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n \"programFiles\": [\n \"kernel/trace/tracing_map.c\"\n ],\n \"versions\": [\n {\n \"version\": \"4.17\",\n \"status\": \"affected\"\n },\n {\n \"version\": \"0\",\n \"lessThan\": \"4.17\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"4.19.307\",\n \"lessThanOrEqual\": \"4.19.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"5.4.269\",\n \"lessThanOrEqual\": \"5.4.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"5.10.210\",\n \"lessThanOrEqual\": \"5.10.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"5.15.149\",\n \"lessThanOrEqual\": \"5.15.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"6.1.76\",\n \"lessThanOrEqual\": \"6.1.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"6.6.15\",\n \"lessThanOrEqual\": \"6.6.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"6.7.3\",\n \"lessThanOrEqual\": \"6.7.*\",\n \"status\": \"unaffected\",\n \"versionType\": \"semver\"\n },\n {\n \"version\": \"6.8\",\n \"lessThanOrEqual\": \"*\",\n \"status\": \"unaffected\",\n \"versionType\": \"original_commit_for_fix\"\n }\n ]\n }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/5022b331c041e8c54b9a6a3251579bd1e8c0fc0b","https://git.kernel.org/stable/c/dad9b28f675ed99b4dec261db2a397efeb80b74c","https://git.kernel.org/stable/c/ef70dfa0b1e5084f32635156c9a5c795352ad860","https://git.kernel.org/stable/c/aef1cb00856ccfd614467cfb50b791278992e177","https://git.kernel.org/stable/c/f4f7e696db0274ff560482cc52eddbf0551d4b7a","https://git.kernel.org/stable/c/a1eebe76e187dbe11ca299f8dbb6e45d5b1889e7","https://git.kernel.org/stable/c/bf4aeff7da85c3becd39fb73bac94122331c30fb","https://git.kernel.org/stable/c/2b44760609e9eaafc9d234a6883d042fc21132a7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-26645","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-26645","identifiers":["CVE-2024-26645"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-09T22:04:21.7510311+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-09T22:04:21.7510311+00:00","lastSuccessAt":"2026-11-09T22:04:21.9174281+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:21.9174285+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-24e6fde7b744113daefb8f6135035fb8a5c69c9617c9c0d40574a0376532ffd3-496c6c80845a4235d695039f4a651d70f3b55bc53fc01f5ca259c734136db852","complete":true,"records":421688,"lastAttemptAt":"2026-11-09T22:02:15.6116354+00:00","lastSuccessAt":"2026-11-09T22:02:15.4777453+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:02:15.6116354+00:00","snapshotPublishedAt":"2026-11-09T21:30:28+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-2ada553023904bf98a99d0ce0d192ba5","complete":false,"records":13672,"lastAttemptAt":"2026-11-09T22:13:09.4707715+00:00","lastSuccessAt":"2026-11-09T22:13:09.546914+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:13:09.546914+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-09T22:04:21.7510311+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-09T22:04:21.7510311+00:00","lastSuccessAt":"2026-11-09T22:04:21.9181937+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:21.9181977+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-8b527f7960454708a3fcfe8f37f191e9","complete":false,"records":13680,"lastAttemptAt":"2026-11-09T22:04:47.0464678+00:00","lastSuccessAt":"2026-11-09T22:04:47.043+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:47.043+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13704,"expectedIdentifiers":13725,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-422f1ff5212ec8e62457b7c5d867c0d7ff5bdd57ee4fe937d3d7712d35f862bb","complete":true,"records":9919,"lastAttemptAt":"2026-11-09T22:04:21.6095423+00:00","lastSuccessAt":"2026-11-09T22:04:21.3703177+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:21.6095423+00:00","snapshotPublishedAt":"2026-11-09T22:03:02+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-09T22:02:15.7662034+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:02:15.7662034+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-09T22:04:21.7141844+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:21.7141844+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-cefd5e58c60b69931053d90de4b49991fc540e6131b53c29cfa39467d9128b3a","complete":true,"records":231328,"lastAttemptAt":"2026-11-09T22:04:12.3749697+00:00","lastSuccessAt":"2026-11-09T22:04:10.8762138+00:00","error":null,"lastVerifiedAt":"2026-11-09T22:04:12.3749697+00:00","snapshotPublishedAt":"2026-11-09T21:48:24+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}