PT-2024-35559 · Linux+8 · Linux Kernel+8
Jann Horn
·
Published
2024-11-05
·
Updated
2025-10-03
·
CVE-2024-53096
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises from the mmap region() function's complex control flow, which can lead to incomplete state, memory leaks, and other problems. The complexity is due to handling errors late in the process of mapping a VMA, resulting in recently observed issues with resource leaks and observable inconsistent state. To resolve this, checks are moved earlier in the code, simplifying the logic by moving the core into a static internal function mmap region(). This allows for checks to be performed upfront and unconditional validation. The changes include preallocating memory for the iterator, handling mapping map writable() logic early, and moving arch validate flags() up into the mmap region() function. These measures eliminate a class of errors, making the code more robust.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu