PT-2024-33973 · Linux+7 · Linux Kernel+7
Published
2024-11-07
·
Updated
2025-10-03
·
CVE-2024-50141
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
The issue arises because the PRMT is finding a block of type EFI CONVENTIONAL MEMORY, which is not appropriate for runtime services as described in Section 2.2.2 (Runtime Services) of the UEFI Specification. This causes an exception when the PRM handler is called, resulting in a failure during error handling. The problem is that only memory that has been remapped for runtime by the firmware can be used by the PRM handler, and so the region needs to have the EFI MEMORY RUNTIME attribute. By using the correct memory types for runtime services, the PRM handler and the context are properly mapped in the virtual address space during runtime, preventing the paging request error.
Recommendations:
Update to Linux kernel version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the PRM handler until a patch is available. Ensure that the correct memory types are used for runtime services to prevent the paging request error.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu