CVE-2024-42251

Опубликовано: 08 авг. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

mm: page_ref: remove folio_try_get_rcu()

The below bug was reported on a non-SMP kernel:

[ 275.267158][ T4335] ------------[ cut here ]------------ [ 275.267949][ T4335] kernel BUG at include/linux/page_ref.h:275! [ 275.268526][ T4335] invalid opcode: 0000 [#1] KASAN PTI [ 275.269001][ T4335] CPU: 0 PID: 4335 Comm: trinity-c3 Not tainted 6.7.0-rc4-00061-gefa7df3e3bb5 #1 [ 275.269787][ T4335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 275.270679][ T4335] RIP: 0010:try_get_folio (include/linux/page_ref.h:275 (discriminator 3) mm/gup.c:79 (discriminator 3)) [ 275.272813][ T4335] RSP: 0018:ffffc90005dcf650 EFLAGS: 00010202 [ 275.273346][ T4335] RAX: 0000000000000246 RBX: ffffea00066e0000 RCX: 0000000000000000 [ 275.274032][ T4335] RDX: fffff94000cdc007 RSI: 0000000000000004 RDI: ffffea00066e0034 [ 275.274719][ T4335] RBP: ffffea00066e0000 R08: 00000000000000

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.6 (включая) до 6.6.42 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.9.11 (исключая)

cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.10:rc7:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00022

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVE-2024-42251

CVSS3: 5.5

ubuntu

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cut here ]------------ [ 275.267949][ T4335] kernel BUG at include/linux/page_ref.h:275! [ 275.268526][ T4335] invalid opcode: 0000 [#1] KASAN PTI [ 275.269001][ T4335] CPU: 0 PID: 4335 Comm: trinity-c3 Not tainted 6.7.0-rc4-00061-gefa7df3e3bb5 #1 [ 275.269787][ T4335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 275.270679][ T4335] RIP: 0010:try_get_folio (include/linux/page_ref.h:275 (discriminator 3) mm/gup.c:79 (discriminator 3)) [ 275.272813][ T4335] RSP: 0018:ffffc90005dcf650 EFLAGS: 00010202 [ 275.273346][ T4335] RAX: 0000000000000246 RBX: ffffea00066e0000 RCX: 0000000000000000 [ 275.274032][ T4335] RDX: fffff94000cdc007 RSI: 0000000000000004 RDI: ffffea00066e0034 [ 275.274719][ T4335] RBP: ffffea00066e0000 R08: 00000000000...

CVE-2024-42251

CVSS3: 5.5

redhat

11 месяцев назад

CVE-2024-42251

CVSS3: 5.5

debian

11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: m ...

GHSA-p744-9p3j-x3vr

CVSS3: 5.5

github

11 месяцев назад

BDU:2025-01414

CVSS3: 5.5

fstec

12 месяцев назад

Уязвимость компонента mm ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%

0.00022

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617