PT-2024-29723 · Linux+4 · Linux Kernel+4

Christophe Leroy · Published 2024-03-08 · Updated 2026-05-26 · CVE-2024-42067

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, where the function set memory rox() can fail, leaving memory unprotected. The function bpf jit binary lock ro() should check the return value of set memory rox() and bail out if an error occurs. This prevents memory from being left unprotected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-47137

AZL-47157

BDU:2025-03000

CVE-2024-42067

ECHO-B640-63B7-36E2

MGASA-2024-0277

MGASA-2024-0278

OESA-2024-2219

OESA-2024-2255

OESA-2024-2257

OESA-2024-2258

USN-7089-1

USN-7089-2

USN-7089-3

USN-7089-4

USN-7089-5

USN-7089-6

USN-7089-7

USN-7090-1

USN-7095-1

USN-7156-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 833

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42067.json · Exploit
• https://ubuntu.com/security/CVE-2024-41064 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41036 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43825 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46738 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43829 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46672 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46735 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42115 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46846 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39494 · Security Note
• https://ubuntu.com/security/CVE-2024-46761 · Vendor Advisory