PT-2024-4102 · Linux+7 · Linux Kernel+7

Marius Fleischer

·

Published

2024-05-05

·

Updated

2025-09-29

·

CVE-2024-36891

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a null pointer dereference in the mas empty area rev() function within the lib/maple tree.c module of the Linux kernel. This occurs when mas start() is called followed by mas data end() if the maple state is MA START, but mas start() may return with the maple state node being NULL. A user could trigger events to cause a kernel oops by unmapping all vmas to produce an empty maple tree, then mapping a vma that would cause this scenario.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-42474
BDU:2024-04553
CVE-2024-36891
INFSA-2024_9315
MGASA-2024-0263
MGASA-2024-0266
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:2135-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20249-1
USN-6949-1
USN-6949-2
USN-6952-1
USN-6952-2
USN-6955-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu