In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported: BUG: unable to handle page fault for address: ffffffffff600000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 3231067 P4D 3231067 PUD 3233067 PMD 3235067 PTE 0 Oops: 0000 [#1] PREEMPT …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/29bd6f86904682adafe9affbc7f79b14defcaff8 Patch
- https://git.kernel.org/stable/c/32019c659ecfe1d92e3bf9fcdfbb11a7c70acd58 Patch
- https://git.kernel.org/stable/c/57f78c46f08198e1be08ffe99c4c1ccc12855bf5 Patch
- https://git.kernel.org/stable/c/6e4694e65b6db4c3de125115dd4f55848cc48381 Patch
- https://git.kernel.org/stable/c/e8a67fe34b76a49320b33032228a794f40b0316b Patch
- https://git.kernel.org/stable/c/f175de546a3eb77614d94d4c02550181c0a8493e Patch
- https://git.kernel.org/stable/c/29bd6f86904682adafe9affbc7f79b14defcaff8 Patch
- https://git.kernel.org/stable/c/32019c659ecfe1d92e3bf9fcdfbb11a7c70acd58 Patch
- https://git.kernel.org/stable/c/57f78c46f08198e1be08ffe99c4c1ccc12855bf5 Patch
- https://git.kernel.org/stable/c/6e4694e65b6db4c3de125115dd4f55848cc48381 Patch
- https://git.kernel.org/stable/c/e8a67fe34b76a49320b33032228a794f40b0316b Patch
- https://git.kernel.org/stable/c/f175de546a3eb77614d94d4c02550181c0a8493e Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Timeline
- nvd_ingest NVD