In the Linux kernel, the following vulnerability has been resolved:
uprobes: fix kernel info leak via "[uprobes]" vma
xol_add_vma() maps the uninitialized page allocated by __create_xol_area()
into userspace. On some architectures (x86) this memory is readable even
without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ,
although this doesn't really matter, debugger can read this memory anyway.
CVSS
No CVSS.
References
Configurations
No configuration.
History
21 Oct 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-21 18:15
Updated : 2024-10-21 18:15
NVD link : CVE-2024-49975
Mitre link : CVE-2024-49975
CVE.ORG link : CVE-2024-49975
JSON object : View
Products Affected
No product.
CWE
No CWE.