Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex
AV AC PR UI S C I A CVSS EPSS %ile KEV
L H L N U H N H 6.3 .0017 6.3 —
AFFECTED
Product Versions Fixed
Linux 8a6fe8f21ec4f049a7b1fe120ad50a5065a9c7a8 – —
Linux 6.12 – 6.12.2
TIMELINE
Dec 27 Reserved by Linux
Dec 28 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-56706 (Linux). CVSS 7.8 → 6.3 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex
Reservation of the PMU hardware is done at first event creation
and is protected by a pair of mutex_lock() and mutex_unlock().
After reservation of the PMU hardware the memory
required for the PMUs the event is to be installed on is
allocated by allocate_buffers() and alloc_sampling_buffer().
This done outside of the mutex protection.
Without mutex protection two or more concurrent invocations of
perf_event_init() may run in parallel.
This can lead to allocation of Sample Data Blocks (SDBs)
multiple times for the same PMU.
Prevent this and protect memory allocation of SDBs by
mutex.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| December 27, 2024 | Reserved | Reserved by Linux |
| December 28, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-56706 (Linux). CVSS 7.8 → 6.3 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 8a6fe8f21ec4f049a7b1fe120ad50a5065a9c7a8 | — |
| Linux | Linux | — | 6.12 | 6.12.2 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-56706 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.