PT-2024-32112 · Linux+1 · Linux Kernel+1

Greg Ungerer · Published 2024-08-25 · Updated 2025-09-29 · CVE-2024-46684

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions up to 6.10.7

Description The issue is related to the create elf fdpic tables() function not correctly accounting for the space for the AUX vector when an architecture has ELF HWCAP2 defined. This results in a kernel BUG. The problem is fixed by adding one to the number of AUXV entries (nitems) when ELF HWCAP2 is defined. An attacker could potentially gain elevated permissions.

Recommendations Upgrade to a version later than 6.10.7 to resolve the issue. As a temporary workaround, consider restricting access to the binfmt elf fdpic module to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-131

CWE-682

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13260

BDU:2025-03757

CVE-2024-46684

Affected Products

Alt Linux

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46684.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2024-46684 · Vendor Advisory
• https://git.kernel.org/stable/c/c6a09e342f8e6d3cac7f7c5c14085236aca284b9 · Patch
• https://git.kernel.org/stable/c/c507da85e4f80c630deb9e98222ccf4118cbe6f8 · Patch
• https://cve.org/CVERecord?id=CVE-2024-46684 · Security Note
• https://bdu.fstec.ru/vul/2025-03757 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-46684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46684 · Security Note
• https://ubuntu.com/security/CVE-2024-46684 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-46684 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-46684 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-46684 · Vendor Advisory
• https://git.kernel.org/linus/c6a09e342f8e6d3cac7f7c5c14085236aca284b9 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2024091337-CVE-2024-46684-d492@gregkh · Note