CVE-2024-26946

2024-05-0100:00:00

ubuntu.com

cve-2024-26946

kprobes/x86

copy_from_kernel_nofault

arch_adjust_kprobe_addr

kernel_panic

syzcaller_bot

unsafe_address

inaccessible_data_area

AI Score

6.3

Confidence

Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:
kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
Read from an unsafe address with copy_from_kernel_nofault() in
arch_adjust_kprobe_addr() because this function is used before checking the
address is in text or not. Syzcaller bot found a bug and reported the case
if user specifies inaccessible data area, arch_adjust_kprobe_addr() will
cause a kernel panic. [ mingo: Clarified the comment. ]

OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchlinux< 6.8.0-35.35UNKNOWN
ubuntu24.04noarchlinux-aws< 6.8.0-1009.9UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-azure< 6.8.0-1008.8UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-gcp< 6.8.0-1008.9UNKNOWN
ubuntu22.04noarchlinux-gcp-6.5< anyUNKNOWN
ubuntu24.04noarchlinux-gke< 6.8.0-1004.7UNKNOWN
ubuntu24.04noarchlinux-ibm< 6.8.0-1006.6UNKNOWN
ubuntu24.04noarchlinux-lowlatency< 6.8.0-35.35.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	24.04	noarch	linux	< 6.8.0-35.35	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< 6.8.0-1009.9	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< 6.8.0-1008.8	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-gcp	< 6.8.0-1008.9	UNKNOWN
ubuntu	22.04	noarch	linux-gcp-6.5	< any	UNKNOWN
ubuntu	24.04	noarch	linux-gke	< 6.8.0-1004.7	UNKNOWN
ubuntu	24.04	noarch	linux-ibm	< 6.8.0-1006.6	UNKNOWN
ubuntu	24.04	noarch	linux-lowlatency	< 6.8.0-35.35.1	UNKNOWN