CVE-2024-57888

What it actually does

Causes false positive warnings from check_flush_dependency when cancel_delayed_work_sync is invoked on WQ_MEM_RECLAIM work from a non-WQ_MEM_RECLAIM context in the Linux kernel workqueue subsystem.

Why it matters to the business

Produces spurious kernel log noise that can mask genuine issues, increase alert fatigue, and complicate diagnostics on systems using affected drivers such as amdgpu; low exploitation risk given EPSS of 0.00207 and no KEV listing.

How an attack unfolds

No practical attack path exists; the issue is a verification false positive rather than a flaw permitting code execution or privilege gain. The warning was introduced after commit 746ae46c1113 and surfaces during normal driver operation such as amdgpu_gfx_off_ctrl and drm_sched_run_job_work.

How to fix it

Update the Linux kernel to commit 1fd2a57dcb4de3cb40844a29c71b5d7b46a84334 or a later stable release containing the fix. For packaged distributions apply the corresponding update (e.g., imagemagick 8:6.9.7.4+dfsg-16ubuntu2 on Ubuntu 18.04 LTS where applicable).

How to confirm the fix worked

Confirm the fix commit is present in the running kernel, reproduce the original cancellation path, and verify that the WQ_MEM_RECLAIM warning no longer appears.

Typical attack path

1. Run a workload that triggers delayed work cancellation from a non-reclaim worker context
2. Observe the check_flush_dependency warning in dmesg or kernel logs

How to detect it

Search kernel logs and dmesg for the strings "WQ_MEM_RECLAIM" together with "check_flush_dependency" or "cancel_delayed_work_sync" originating from amdgpu or gpu_sched workqueues.

What your security team should do

• Prioritize kernel package updates on all affected systems within normal change windows
• Review kernel logs for the specific workqueue flush warning pattern to baseline noise
• Track EPSS trend (stable at ~0.0021) and re-evaluate if new threat actor activity appears