PT-2024-30681 · Linux+5 · Linux Kernel+5
Published
2024-07-04
·
Updated
2026-03-14
·
CVE-2024-43819
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.2
Description
A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs when the KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 ioctls are called on a ucontrol VM, which has kvm->arch.gmap set to 0. To avoid this issue, memory management should be performed in userspace using the ioctls KVM S390 UCAS MAP and KVM S390 UCAS UNMAP. The s390 specific documentation for KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 has also been improved.
Recommendations
Upgrade to a version later than 6.10.2 to resolve the issue. As a temporary workaround, consider rejecting the KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 ioctls when called on a ucontrol VM. Restrict access to the vulnerable ioctls to minimize the risk of exploitation. Avoid using the ioctls KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 on ucontrol VMs until the issue is resolved.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu