Executive Summary

Informations
Name CVE-2024-41083 First vendor Publication 2024-07-29
Vendor Cve Last vendor Modification 2024-08-26

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid

Fix netfs_page_mkwrite() to check that folio->mapping is valid once it has taken the folio lock (as filemap_page_mkwrite() does). Without this, generic/247 occasionally oopses with something like the following:

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page

RIP: 0010:trace_event_raw_event_netfs_folio+0x61/0xc0
...
Call Trace:

? __die_body+0x1a/0x60
? page_fault_oops+0x6e/0xa0
? exc_page_fault+0xc2/0xe0
? asm_exc_page_fault+0x22/0x30
? trace_event_raw_event_netfs_folio+0x61/0xc0
trace_netfs_folio+0x39/0x40
netfs_page_mkwrite+0x14c/0x1d0
do_page_mkwrite+0x50/0x90
do_pte_missing+0x184/0x200
__handle_mm_fault+0x42d/0x500
handle_mm_fault+0x121/0x1f0
do_user_addr_fault+0x23e/0x3c0
exc_page_fault+0xc2/0xe0
asm_exc_page_fault+0x22/0x30

This is due to the invalidate_inode_pages2_range() issued at the end of the DIO write interfering with the mmap'd writes.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41083

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3614

Sources (Detail)

https://git.kernel.org/stable/c/3473eb87afd402e415a8ca885b284ea0420dde25
https://git.kernel.org/stable/c/a81c98bfa40c11f8ea79b5a9b3f5fda73bfbb4d2
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2024-11-22 21:22:40
  • Multiple Updates
2024-11-21 21:22:11
  • Multiple Updates
2024-11-20 02:58:34
  • Multiple Updates
2024-11-14 02:58:52
  • Multiple Updates
2024-11-09 02:58:53
  • Multiple Updates
2024-10-26 02:56:17
  • Multiple Updates
2024-10-25 02:58:12
  • Multiple Updates
2024-10-23 02:57:25
  • Multiple Updates
2024-10-03 02:52:44
  • Multiple Updates
2024-10-02 02:51:08
  • Multiple Updates
2024-09-15 02:48:54
  • Multiple Updates
2024-09-12 02:48:27
  • Multiple Updates
2024-09-07 02:47:26
  • Multiple Updates
2024-09-06 02:46:36
  • Multiple Updates
2024-09-03 21:27:59
  • Multiple Updates
2024-08-26 21:27:57
  • Multiple Updates
2024-07-29 21:27:27
  • First insertion