PT-2024-7867 · Linux+8 · Linux Kernel+8

Qiang Zhang · Published 2024-03-22 · Updated 2025-09-29 · CVE-2024-26946

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the kprobes/x86 component of the Linux kernel, where the function arch adjust kprobe addr() uses copy from kernel nofault() to read from an unsafe address before checking if the address is in text or not. This can cause a kernel panic if a user specifies an inaccessible data area. The Syzcaller bot found a bug and reported the case.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

RCE

Weakness Enumeration

CWE-617

CWE-20

Related Identifiers

ALSA-2024:6567

ALSA-2025_16880

BDU:2024-09369

CVE-2024-26946

INFSA-2024_6567

RHSA-2024:6267

RHSA-2024:6268

RHSA-2024:6567

RHSA-2024_6567

RLSA-2024:6567

RXSA-2024:6567

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2277

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26946.json · Exploit
• https://ubuntu.com/security/CVE-2024-27048 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35831 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-38096 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26966 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26932 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27390 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52653 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:6567 · Vendor Advisory