PT-2024-7331 · Linux+1 · Linux Kernel+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the function
filemap fault recheck pte none() in the Linux kernel's memory management subsystem. It involves a race condition that may lead to the reuse of previously freed memory, potentially allowing an attacker to impact the integrity of protected information. The problem arises because the vmf->ptl is still set from handle pte fault(), but at the same time, pte unmap(vmf->pte) is performed, which can cause the page table to be changed, making vmf->ptl fail to protect the actual page table. This might trigger a Use After Free (UAF) condition.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel