PT-2024-30706 · Linux+7 · Linux Kernel+7
Alexander Zubkov
·
Published
2024-06-10
·
Updated
2025-09-29
·
CVE-2024-43846
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The Linux kernel library supports aggregation of objects into other objects only if the parent object does not have a parent itself, meaning nesting is not supported. Aggregation happens in two cases: without and with hints, where hints are pre-computed recommendations on how to aggregate the provided objects. The violation of the assumption that nesting cannot happen when creating objects based on hints leads to various warnings and eventually to a general protection fault.
Recommendations
Update to Linux kernel version 6.6.50 or later to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu