CVE-2024-46847

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the initialization of the vmap block structure in the Linux kernel. When a new vmap block is being instantiated by new vmap block(), the partially initialized structure is added to the local vmap block queue xarray before the cpu field has been initialized. If another CPU is concurrently walking the xarray, it may perform an out-of-bounds access to the remote queue thanks to an uninitialized index. This has been observed as UBSAN errors in Android.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.