PT-2024-33963 · Linux+3 · Linux Kernel+3
Mikel Rychliski
·
Published
2024-09-30
·
Updated
2025-09-29
·
CVE-2024-50132
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.11.0-rc7+
Description:
The issue is related to the tracing/probes functionality in the Linux kernel. When creating a trace probe, the kernel would set nr args prior to truncating the arguments to MAX TRACE ARGS, but only initialize arguments up to the limit. This caused invalid memory access when attempting to set up probes with more than 128 fetchargs, resulting in a kernel NULL pointer dereference. The problem is resolved by applying the MAX TRACE ARGS limit earlier and returning an error when there are too many arguments instead of silently truncating.
Recommendations:
For Linux kernel versions prior to 6.11.0-rc7+, apply the MAX TRACE ARGS limit earlier and return an error when there are too many arguments instead of silently truncating. As a temporary workaround, consider restricting the use of the tracing/probes functionality to minimize the risk of exploitation.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Ubuntu