Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26946
HistoryMay 01, 2024 - 5:22 p.m.

CVE-2024-26946

2024-05-0117:22:35
redhat.com
access.redhat.com
16
linux kernel
kprobes
x86
vulnerability
resolved
copy_from_kernel_nofault
arch_adjust_kprobe_addr
kernel panic

AI Score

7

Confidence

Low

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the address is in text or not. Syzcaller bot found a bug and reported the case if user specifies inaccessible data area, arch_adjust_kprobe_addr() will cause a kernel panic. [ mingo: Clarified the comment. ]