PT-2024-29724 · Linux+6 · Linux Kernel+6

Christophe Leroy

·

Published

2024-03-08

·

Updated

2026-03-14

·

CVE-2024-42068

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel, where the function set memory ro() can fail, leaving memory unprotected. The return from set memory ro() needs to be taken into account with bpf prog lock ro(). This error can be addressed by checking the return of set memory ro() and handling it as an error.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-252CWE-120

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-10855
ALT-PU-2024-11524
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-47216
BDU:2025-02949
CVE-2024-42068
DLA-4008-1
MGASA-2024-0277
MGASA-2024-0278
OESA-2024-1960
OESA-2024-1961
OESA-2024-1962
OESA-2024-1964
USN-7007-1
USN-7007-2
USN-7007-3
USN-7009-1
USN-7009-2
USN-7019-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1
USN-7159-1
USN-7159-2
USN-7159-3
USN-7159-4
USN-7159-5
USN-7195-1
USN-7195-2
USN-7332-1
USN-7332-2
USN-7332-3
USN-7342-1
USN-7344-1
USN-7344-2

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu