First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-42267

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()

Handle VM_FAULT_SIGSEGV in the page fault path so that we correctly kill the process and we don't BUG() the kernel.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
Linux	Linux	>= 07037db5d479f90377c998259a4f9a469c404edf, < 59be4a167782d68e21068a761b90b01fadc09146; >= 07037db5d479f90377c998259a4f9a469c404edf, < 20dbdebc5580cd472a310d56a6e252275ee4c864; >= 07037db5d479f90377c998259a4f9a469c404edf, < d7ccf2ca772bfe33e2c53ef80fa20d2d87eb6144; >= 07037db5d479f90377c998259a4f9a469c404edf, < 917f598209f3f5e4ab175d5079d8aeb523e58b1f; >= 07037db5d479f90377c998259a4f9a469c404edf, < d4e7db757e2d7f4c407a007e92c98477eab215d2; >= 07037db5d479f90377c998259a4f9a469c404edf, < 0c710050c47d45eb77b28c271cddefc5c785cb40
Linux	Linux	4.15

References

Timeline

Published: Aug 17, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-422685.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload w CVE-2024-422695.5In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table CVE-2024-42277.5In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML CVE-2024-422705.5In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). W CVE-2024-422717.8In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucv_sock_close() iucv_sever_path() is CVE-2024-422725.5In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed comm CVE-2024-422735.5In the Linux kernel, the following vulnerability has been resolved: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid mkdir /mnt/test/CVE-2024-422745.5In the Linux kernel, the following vulnerability has been resolved: Revert "ALSA: firewire-lib: operate for period elapse event in process CVE-2024-422755.5In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix error code in drm_client_buffer_vmap_local() This func CVE-2024-422765.5In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvm CVE-2024-422775.5In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en In sprd_iommu_cleanu CVE-2024-422785.5In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdev_load_calibrated_data() This function has a r

CVE-2024-42267: Medium severity, CVSS 5.5 | Vulnix