Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-26946
HistoryMay 01, 2024 - 6:15 a.m.

CVE-2024-26946

2024-05-0106:15:10
Debian Security Bug Tracker
security-tracker.debian.org
4
linux
kernel
vulnerability
cve-2024-26946
copy_from_kernel_nofault
kprobes
x86
arch_adjust_kprobe_addr
kernel panic
syzcaller bot

AI Score

6.5

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the address is in text or not. Syzcaller bot found a bug and reported the case if user specifies inaccessible data area, arch_adjust_kprobe_addr() will cause a kernel panic. [ mingo: Clarified the comment. ]

AI Score

6.5

Confidence

High

EPSS

0

Percentile

15.5%