CVE-2024-50133

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks without vDSO Not all tasks have a vDSO mapped, for example kthreads never do. If such a task ever ends up calling stack_top(), it will derefence the NULL vdso pointer and crash. This can for example happen when using kunit: [<9000000000203874>] stack_top+0x58/0xa8 [<90000000002956cc>] arch_pick_mmap_layout+0x164/0x220 [<90000000003c284c>] kunit_vm_mmap_init+0x108/0x12c [<90000000003c1fbc>] __kunit_add_resource+0x38/0x8c [<90000000003c2704>] kunit_vm_mmap+0x88/0xc8 [<9000000000410b14>] usercopy_test_init+0xbc/0x25c [<90000000003c1db4>] kunit_try_run_case+0x5c/0x184 [<90000000003c3d54>] kunit_generic_run_threadfn_adapter+0x24/0x48 [<900000000022e4bc>] kthread+0xc8/0xd4 [<9000000000200ce8>] ret_from_kernel_thread+0xc/0xa4
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*

History

07 Nov 2024, 21:17

Type Values Removed Values Added
CWE CWE-476
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/041cc3860b06770357876d1114d615333b0fbf31 - () https://git.kernel.org/stable/c/041cc3860b06770357876d1114d615333b0fbf31 - Patch
References () https://git.kernel.org/stable/c/134475a9ab8487527238d270639a8cb74c10aab2 - () https://git.kernel.org/stable/c/134475a9ab8487527238d270639a8cb74c10aab2 - Patch
References () https://git.kernel.org/stable/c/a67d4a02bf43e15544179895ede7d5f97b84b550 - () https://git.kernel.org/stable/c/a67d4a02bf43e15544179895ede7d5f97b84b550 - Patch
References () https://git.kernel.org/stable/c/a94c197d4d749954dfaa37e907fcc8c04e4aad7e - () https://git.kernel.org/stable/c/a94c197d4d749954dfaa37e907fcc8c04e4aad7e - Patch

06 Nov 2024, 18:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: LoongArch: No se bloquea en stack_top() para tareas sin vDSO No todas las tareas tienen un vDSO asignado, por ejemplo, kthreads nunca lo tiene. Si alguna vez una tarea de este tipo termina llamando a stack_top(), desreferenciará el puntero vdso NULL y se bloqueará. Esto puede suceder, por ejemplo, al usar kunit: [&lt;9000000000203874&gt;] stack_top+0x58/0xa8 [&lt;90000000002956cc&gt;] arch_pick_mmap_layout+0x164/0x220 [&lt;90000000003c284c&gt;] kunit_vm_mmap_init+0x108/0x12c [&lt;90000000003c1fbc&gt;] __kunit_add_resource+0x38/0x8c [&lt;90000000003c2704&gt;] kunit_vm_mmap+0x88/0xc8 [&lt;9000000000410b14&gt;] usercopy_test_init+0xbc/0x25c [&lt;90000000003c1db4&gt;] kunit_try_run_case+0x5c/0x184 [&lt;90000000003c3d54&gt;] kunit_generic_run_threadfn_adapter+0x24/0x48 [&lt;900000000022e4bc&gt;] kthread+0xc8/0xd4 [&lt;9000000000200ce8&gt;] ret_from_kernel_thread+0xc/0xa4

05 Nov 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-05 18:15

Updated : 2024-11-07 21:17


NVD link : CVE-2024-50133

Mitre link : CVE-2024-50133

CVE.ORG link : CVE-2024-50133


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference