CVE-2024-41055

Summary

In the Linux kernel, the following vulnerability has been resolved:

mm: prevent derefencing NULL ptr in pfn_section_valid()

Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux90ad17575d26874287271127d43ef3c2af876cea < 0100aeb8a12d51950418e685f879cc80cb8e5982affected
LinuxLinuxb448de2459b6d62a53892487ab18b7d823ff0529 < bc17f2377818dca643a74499c3f5333500c90503affected
LinuxLinux68ed9e33324021e9d6b798e9db00ca3093d2012a < 941e816185661bf2b44b488565d09444ae316509affected
LinuxLinux70064241f2229f7ba7b9599a98f68d9142e81a97 < 797323d1cf92d09b7a017cfec576d9babf99cde7affected
LinuxLinux5ec8e8ea8b7783fab150cf86404fc38cb4db8800 < adccdf702b4ea913ded5ff512239e382d7473b63affected
LinuxLinux5ec8e8ea8b7783fab150cf86404fc38cb4db8800 < 82f0b6f041fad768c28b4ad05a683065412c226eaffected
LinuxLinux3a01daace71b521563c38bbbf874e14c3e58adb7affected
LinuxLinux5.10.210 < 5.10.222affected
LinuxLinux5.15.149 < 5.15.163affected
LinuxLinux6.1.76 < 6.1.100affected
LinuxLinux6.6.15 < 6.6.41affected
LinuxLinux6.7.3 < 6.8affected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux5.10.222 <= 5.10.*unaffected
LinuxLinux5.15.163 <= 5.15.*unaffected
LinuxLinux6.1.100 <= 6.1.*unaffected
LinuxLinux6.6.41 <= 6.6.*unaffected
LinuxLinux6.9.10 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References