PT-2024-10541 · Linux+4 · Linux Kernel+4

Yunseong Kim · Published 2024-07-17 · Updated 2025-01-20 · CVE-2024-41021

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the handling of VM FAULT HWPOISON in the do exception() function. Since there is no support for HWPOISON, MEMORY FAILURE, or ARCH HAS COPY MC on s390, VM FAULT HWPOISON is not expected in do exception(). However, due to a commit that made PTE MARKER SWAPIN ERROR more general, it is possible to see VM FAULT HWPOISON in combination with PTE MARKER POISONED. To fix this, VM FAULT HWPOISON is treated the same as VM FAULT SIGBUS, similar to x86 when MEMORY FAILURE is not configured. Unexpected fault flags are also printed for easier debugging.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-388

CWE-401

Related Identifiers

BDU:2025-01092

CVE-2024-41021

OESA-2024-1960

USN-7089-1

USN-7089-2

USN-7089-3

USN-7089-4

USN-7089-5

USN-7089-6

USN-7089-7

USN-7090-1

USN-7095-1

USN-7156-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 731

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41021.json · Exploit
• https://ubuntu.com/security/CVE-2024-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46753 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40981 · Security Note
• https://ubuntu.com/security/CVE-2024-46825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42278 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory