CVE-2024-42318

2024-08-1914:16:14

redhat.com

access.redhat.com

linux kernel

landlock

vulnerability

fix

cred_transfer

keyctl_session_to_parent

syscalls

AI Score

7.2

Confidence

High

JSON

A vulnerability was found in the Linux kernel’s axi_chan_handle_err function, which caused a kernel panic due to NULL pointer dereferencing. This issue has been fixed. The update protects the vd variable to prevent such crashes. The axi_chan_block_xfer_complete function was used as a reference for this improvement, enhancing system stability during exceptional cases.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.