PT-2024-21591

CVE-2024-26947

·

Published

2024-03-07

·

Updated

2026-10-18

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.2
Description A vulnerability in the Linux kernel has been resolved, which was caused by a change in the semantics of the pfn valid() function. This change led to a crash during a UIO test with a specific memory layout. The crash occurred because a valid page for a reserved but not mapped address by the kernel was not properly handled. The issue was solved by checking if PG reserved was set.
Recommendations To resolve this issue, upgrade the Linux kernel to a version newer than 6.8.2.
Note: The provided information does not specify the exact version that contains the fix, but it is mentioned that versions up to 6.8.2 are affected. Therefore, upgrading to a newer version should mitigate the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
ALSA-2024:6997
ALSA-2025_16880
AZL-67481
ECHO-4540-049F-2630
INFSA-2024_6997
OESA-2024-1737
OESA-2024-1738
RHSA-2024:5066
RHSA-2024:5067
RHSA-2024:6997
RHSA-2024_6997
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1
USN-7159-1
USN-7159-2
USN-7159-3
USN-7159-4
USN-7159-5
USN-7166-1
USN-7166-2
USN-7166-3
USN-7166-4
USN-7186-1
USN-7186-2
USN-7194-1
USN-7195-1
USN-7195-2
Found an issue in the description? Have something to add? Feel free to write us 👾