PT-2024-31378 · Linux+6 · Linux Kernel+6
Published
2024-08-05
·
Updated
2025-09-29
·
CVE-2024-45025
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to bitmap corruption on close range() with CLOSE RANGE UNSHARE. The function copy fd bitmaps() is expected to copy the first count/BITS PER LONG bits from old->full fds bits[] and fill the rest with zeroes. However, if all bits past the cutoff point are not clear, there is a risk of garbage from the last word being copied. This can lead to observably wrong behavior, such as a child process ending up with an incorrect descriptor after close range() is called. The minimally invasive fix would be to deal with this issue in dup fd(). A new helper function, bitmap copy and expand(), has been added to address this problem.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu