CVE-2024-26946 — Reachable Assertion in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Latest updateJul 4
Description
In the Linux kernel, the following vulnerability has been resolved:
kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
Read from an unsafe address with copy_from_kernel_nofault() in
arch_adjust_kprobe_addr() because this function is used before checking
the address is in text or not. Syzcaller bot found a bug and reported
the case if user specifies inaccessible data area,
arch_adjust_kprobe_addr() will cause a kernel panic.
[ mingo: Clarified the comment. ]
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages9 packages
▶CVEListV5linux/linuxcc66bb91457827f62e2b6cb2518666820f0a6c48 — 6417684315087904fffe8966d27ca74398c57dd6+5
Patches
🔴Vulnerability Details
7📋Vendor Advisories
8💬Community
1Bugzilla▶
CVE-2024-26946 kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address↗2024-05-01