cbcvebase.
CVE-2024-39497
published 2024-07-12

CVE-2024-39497: In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for…

PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.0th percentile
In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag causing a kernel panic due to BUG_ON in vmf_insert_pfn_prot: BUG_ON((vma->vm_flags & VM_PFNMAP) && is_cow_mapping(vma->vm_flags)); Return -EINVAL early if COW mapping is detected. This bug affects all drm drivers using default shmem helpers. It can be reproduced by this simple example: void *ptr = mmap(0, size, PROT_WRITE, MAP_PRIVATE, fd, mmap_offset); ptr[0] = 0;

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.115-1 (bookworm)linux 6.1.115-1 (bookworm)
debianlinux-6.1< linux 6.1.115-1 (bookworm)linux 6.1.115-1 (bookworm)
linuxlinux
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < a508a102edf8735adc9bb73d37dd13c38d1a1b10a508a102edf8735adc9bb73d37dd13c38d1a1b10
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < 3ae63a8c1685e16958560ec08d30defdc5b9cca03ae63a8c1685e16958560ec08d30defdc5b9cca0
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < 2219e5f97244b79c276751a1167615b9714db1b02219e5f97244b79c276751a1167615b9714db1b0
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < 1b4a8b89bf6787090b56424d269bf84ba00c32631b4a8b89bf6787090b56424d269bf84ba00c3263
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < 03c71c42809ef4b17f5d874cdb2d3bf40e847b8603c71c42809ef4b17f5d874cdb2d3bf40e847b86
linuxlinux>= 2194a63a818db71065ebe09c8104f5f021ca4e7b < 39bc27bd688066a63e56f7f64ad34fae03fbe3b839bc27bd688066a63e56f7f64ad34fae03fbe3b8
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.234-15.10.234-1
linuxlinux_kernel>= 0 < 6.1.115-16.1.115-1
linuxlinux_kernel>= 0 < 6.9.7-16.9.7-1
linuxlinux_kernel>= 0 < 6.9.7-16.9.7-1
linuxlinux_kernel>= 0 < 5.15.0-133.1445.15.0-133.144
linuxlinux_kernel>= 0 < 6.8.0-44.446.8.0-44.44
linuxlinux_kernel>= 5.11 < 5.15.1695.15.169
linuxlinux_kernel>= 5.16 < 6.1.1146.1.114
linuxlinux_kernel>= 5.2 < 5.10.2295.10.229
linuxlinux_kernel>= 6.2 < 6.6.356.6.35
linuxlinux_kernel>= 6.7 < 6.9.66.9.6

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.