PT-2024-21591
CVE-2024-26947
·
Published
2024-03-07
·
Updated
2026-10-18
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.2
Description
A vulnerability in the Linux kernel has been resolved, which was caused by a change in the semantics of the
pfn valid() function. This change led to a crash during a UIO test with a specific memory layout. The crash occurred because a valid page for a reserved but not mapped address by the kernel was not properly handled. The issue was solved by checking if PG reserved was set.Recommendations
To resolve this issue, upgrade the Linux kernel to a version newer than 6.8.2.
Note: The provided information does not specify the exact version that contains the fix, but it is mentioned that versions up to 6.8.2 are affected. Therefore, upgrading to a newer version should mitigate the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾