UBUNTU-CVE-2024-50099

In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and simulateldrswliteral functions are unsafe to use for uprobes. Both functions were originally written for use with kprobes, and access memory with...

CVE-2024-50099 arm64: probes: Remove broken LDR (literal) uprobe support

In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and simulateldrswliteral functions are unsafe to use for uprobes. Both functions were originally written for use with kprobes, and access memory with...

CVE-2024-50099

CVE-2024-50099 concerns the Linux kernel arm64 uprobes for LDR (literal) and LDRSW (literal). The two functions, simulate_ldr_literal() and simulate_ldrsw_literal(), were originally written for kprobes and use plain C memory accesses. When uprobes were added, these were reused unmodified, but the...