PT-2024-32791 · Linux+7 · Linux Kernel+7
Shu Han
·
Published
2024-09-19
·
Updated
2026-05-26
·
CVE-2024-47745
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
A security issue has been fixed in the Linux kernel, where the remap file pages syscall handler calls do mmap() directly, which doesn't contain the LSM security check. If the process has called personality(READ IMPLIES EXEC) before and remap file pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. The bypass is similar to a previously known issue, which bypassed the same thing via AIO.
Recommendations
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the use of the remap file pages syscall handler to minimize the risk of exploitation. Additionally, avoid using the
personality(READ IMPLIES EXEC) call before remap file pages() is called for RW pages.Exploit
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu