PT-2024-29826 · Linux · Linux Kernel

Published 2024-07-29 · Updated 2024-08-22 · CVE-2024-42275

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the drm client buffer vmap local() function, which accidentally returns zero or success on the failure path. This leads to locking issues and an uninitialized *map copy in the caller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Access of Uninitialized Pointer

Weakness Enumeration

CWE-252

CWE-824

Related Identifiers

BDU:2026-04390

CVE-2024-42275

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42275.json · Exploit
• https://bdu.fstec.ru/vul/2026-04390 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-42275 · Security Note
• https://git.kernel.org/stable/c/c0f412961653237f52e2f16ee8747fb330bcf074 · Patch
• https://ubuntu.com/security/CVE-2024-42275 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42275 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-42275 · Vendor Advisory
• https://git.kernel.org/stable/c/b5fbf924f125ba3638cfdc21c0515eb7e76264ca · Patch
• https://osv.dev/vulnerability/CVE-2024-42275 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-42275 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-42275 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-42275 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2024081740-CVE-2024-42275-8f91@gregkh · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.4 · Note
• https://twitter.com/CVEnew/status/1824736534425485766 · Twitter Post