PT-2024-7722 · Linux+1 · Linux Kernel+1

Published 2024-02-19 · Updated 2024-10-25 · CVE-2024-26850

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the mm/debug vm pgtable component of the Linux kernel, specifically with the function pud advanced tests(). It involves incorrect handling of devmap PUD pte entries, which can lead to a BUG ON condition being triggered. This issue is only relevant when the CONFIG DEBUG VM configuration option is enabled, typically for debugging purposes on architectures like powerpc. The vulnerability can cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-388

Related Identifiers

BDU:2024-09185

CVE-2024-26850

Affected Products

Linux Kernel

Red Os

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26850.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26850 · Vendor Advisory
• https://git.kernel.org/stable/c/720da1e593b85a550593b415bf1d79a053133451 · Patch
• https://bdu.fstec.ru/vul/2024-09185 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-26850 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26850 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26850 · Vendor Advisory
• https://git.kernel.org/stable/c/d2a9510c0e39d06f5544075c13040407bdbf2803 · Patch
• https://cve.org/CVERecord?id=CVE-2024-26850 · Security Note
• https://git.kernel.org/stable/c/eeeddf85fc58d48c58ad916e4ca12363ebd8ab21 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-26850 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-26850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26850 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://twitter.com/CVEnew/status/1780731109145526658 · Twitter Post