CVE-2024-26946

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address

Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the address is in text or not. Syzcaller bot found a bug and reported the case if user specifies inaccessible data area, arch_adjust_kprobe_addr() will cause a kernel panic.

[ mingo: Clarified the comment. ]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
LinuxLinux>= cc66bb91457827f62e2b6cb2518666820f0a6c48, < 6417684315087904fffe8966d27ca74398c57dd6; >= cc66bb91457827f62e2b6cb2518666820f0a6c48, < f13edd1871d4fb4ab829aff629d47914e251bae3; >= cc66bb91457827f62e2b6cb2518666820f0a6c48, < 20fdb21eabaeb8f78f8f701f56d14ea0836ec861; >= cc66bb91457827f62e2b6cb2518666820f0a6c48, < b69f577308f1070004cafac106dd1a44099e5483; >= cc66bb91457827f62e2b6cb2518666820f0a6c48, < 4e51653d5d871f40f1bd5cf95cc7f2d8b33d063b
LinuxLinux5.18

References

Timeline

Published
May 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-269475.5In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addreCVE-2024-269485.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] CCVE-2024-269495.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit BecauCVE-2024-26955.4The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions uCVE-2024-269507.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The prevCVE-2024-269517.8In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of emptCVE-2024-269527.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I fouCVE-2024-269535.5In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reoCVE-2024-269547.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffCVE-2024-269557.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_geCVE-2024-269567.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappinCVE-2024-269577.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with
CVE-2024-26946: Medium severity, CVSS 5.5 | Vulnix