CVE-2024-56706

A flaw was found in the Linux kernel's s390 CPU-measurement sampling facility. This vulnerability allows a local user to cause a Denial of Service (DoS) through resource exhaustion or kernel instability. Because memory allocation for the Performance Monitoring Unit (PMU) is executed without proper lock synchronization, concurrent performance event requests can trigger duplicate buffer allocations for the same hardware unit.

This vulnerability is rated as Low severity because exploitation is restricted to local execution on IBM Z (s390x) systems and requires winning a race condition between simultaneous performance monitoring requests. The scope of the flaw is limited to the s390x platform, meaning deployments across other CPU architectures are unaffected. Additionally, the consequences are limited to redundant buffer allocations causing resource exhaustion or localized denial of service, without enabling privilege escalation or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.