PT-2024-21591 · Linux+6 · Linux Kernel+6
Mike Rapoport
+2
·
Published
2024-03-07
·
Updated
2026-03-14
·
CVE-2024-26947
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.2
Description
A vulnerability in the Linux kernel has been resolved, which was caused by a change in the semantics of the
pfn valid() function. This change led to a crash during a UIO test with a specific memory layout. The crash occurred because a valid page for a reserved but not mapped address by the kernel was not properly handled. The issue was solved by checking if PG reserved was set.Recommendations
To resolve this issue, upgrade the Linux kernel to a version newer than 6.8.2.
Note: The provided information does not specify the exact version that contains the fix, but it is mentioned that versions up to 6.8.2 are affected. Therefore, upgrading to a newer version should mitigate the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Ubuntu