Lucene search

K
osvGoogleOSV:CVE-2024-46792
HistorySep 18, 2024 - 8:15 a.m.

CVE-2024-46792

2024-09-1808:15:06
Google
osv.dev
linux kernel
vulnerability
restrict user access
kernel memory
software

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

9.6%

In the Linux kernel, the following vulnerability has been resolved:

riscv: misaligned: Restrict user access to kernel memory

raw_copy_{to,from}_user() do not call access_ok(), so this code allowed
userspace to access any virtual memory address.

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

9.6%

Related for OSV:CVE-2024-46792