PT-2024-34128
CVE-2024-50303
·
تاريخ النشر
2024-10-28
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been resolved, where the
walk system ram res rev function erroneously discards resource flags when passing information to the callback. This causes systems with IORESOURCE SYSRAM DRIVER MANAGED memory to have these resources selected during kexec to store kexec buffers if that memory happens to be placed above normal system ram. This leads to undefined behavior after reboot, potentially causing system crashes or undefined behavior if the kexec buffer is touched.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾