CVE-2024-47676
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
21/10/2024
Last modified:
22/10/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway<br />
<br />
Syzbot reports a UAF in hugetlb_fault(). This happens because<br />
vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA<br />
to be freed before hugetlb_vma_unlock_read() is called.<br />
<br />
We can fix this by using a modified version of vmf_anon_prepare() that<br />
doesn&#39;t release the VMA lock on failure, and then release it ourselves<br />
after hugetlb_vma_unlock_read().
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.9 (including) | 6.10.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.11.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page