PT-2024-34054 · Linux+2 · Linux Kernel+2
Jann Horn
·
Published
2024-10-28
·
Updated
2025-05-26
·
CVE-2024-50220
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue arises during the fork operation in the Linux kernel, where the virtual memory address space may be placed into an inconsistent state before the operation is complete. If an error occurs during the fork operation, it may indicate that the virtual memory address space is invalidated. To address this, the fork logic has been updated to defer certain operations until the end of the fork process and only invoke them if no error occurred. Specifically, the
dup userfaultfd complete() function, which invokes registered handlers for the UFFD EVENT FORK event and clears down userfaultfd fork ctx objects, is problematic because it may expose the virtual address space to external machinery that is not designed to handle incomplete states. A new function, dup userfaultfd fail(), has been implemented to roll back state and perform memory freeing duties in case of a fork error.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu