CVE-2024-46792

LowCVSS 3.3/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: misaligned: Restrict user access to kernel memory

raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
LinuxLinux>= 7c83232161f609bbc452a1255f823f41afc411dd, < a3b6ff6c896aee5ef9b581e40d0045ff04fcbc8c; >= 7c83232161f609bbc452a1255f823f41afc411dd, < b686ecdeacf6658e1348c1a32a08e2e72f7c0f00
LinuxLinux6.7

References

Timeline

Published
Sep 18, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-467935.5In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder SCVE-2024-467943.3In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes aCVE-2024-467955.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French repoCVE-2024-467967.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_CVE-2024-467975.5In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs inCVE-2024-467987.8In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel wCVE-2024-467995.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX If numberCVE-2024-46808.8A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to insufficient sessioCVE-2024-468007.8In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enquCVE-2024-468015.5In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistCVE-2024-468025.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dc_validate_stream [Why]CVE-2024-468035.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check debug trap enable before write dbg_ev_file In interr
CVE-2024-46792: Low severity, CVSS 3.3 | Vulnix