PT-2024-33776 · Linux+8 · Linux Kernel+8
Li Zhijian
·
Published
2024-10-21
·
Updated
2026-05-26
·
CVE-2024-49934
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel version 6.10.0-rc2-lizhijian+
Description:
A crash occurs during hot-remove of a memory device when a user is accessing the hugetlb, due to dump mapping() accessing an invalid dentry.d name.name. The issue arises because dump mapping() only needs to dump the filename, but it can still run into an invalid dentry.d name.name. To prevent an unnecessary crash, the filename should be retrieved in a safer way.
Recommendations:
As a temporary workaround, consider disabling the dump mapping() function until a patch is available.
Update to a version of the Linux kernel where this issue has been resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu