CVE-2024-56678

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically the powerpc/mm/fault component, where a problem with kfence page fault reporting has been resolved. The copy from kernel nofault() function can be called when reading from /proc/kcore, which may contain unmapped kfence objects, leading to page faults. To handle such faults, the fixup table defined by the nofault() functions is used instead of relying on kfence. This can be triggered by attempting to read from /proc/kcore, for example, using the command dd if=/proc/kcore of=/dev/null bs=1M. The issue involves the copy from kernel nofault() function and the /proc/kcore endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.