PT-2024-32245 · Linux+2 · Linux Kernel+2
Will Deacon
·
Published
2024-08-12
·
Updated
2025-02-08
·
CVE-2024-46847
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the initialization of the
vmap block structure in the Linux kernel. When a new vmap block is being instantiated by new vmap block(), the partially initialized structure is added to the local vmap block queue xarray before the cpu field has been initialized. If another CPU is concurrently walking the xarray, it may perform an out-of-bounds access to the remote queue thanks to an uninitialized index. This has been observed as UBSAN errors in Android.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu