CVE-2024-49975

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "[uprobes]" vma xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesn't really matter, debugger can read this memory anyway.
CVSS

No CVSS.

Configurations

No configuration.

History

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-21 18:15

Updated : 2024-10-21 18:15


NVD link : CVE-2024-49975

Mitre link : CVE-2024-49975

CVE.ORG link : CVE-2024-49975


JSON object : View

Products Affected

No product.

CWE

No CWE.