CVE-2024-39497

MEDIUM EPSS 19.2%
Published Jul 12, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag causing a kernel panic due to BUG_ON in vmf_insert_pfn_prot: BUG_ON((vma->vm_flags & VM_PFNMAP) && is_cow_mapping(vma->vm_flags)); Return -EINVAL early if COW mapping is detected. This bug affects all drm drivers using default shmem helpers. It can be reproduced by this simple example: void *ptr = mmap(0, size, PROT_WRITE, MAP_PRIVATE, fd, mmap_offset); ptr[0] = 0;

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
19.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-617

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥5.2  –  <5.10.229
linuxlinux_kernel*≥5.11  –  <5.15.169
linuxlinux_kernel*≥5.16  –  <6.1.114
linuxlinux_kernel*≥6.2  –  <6.6.35
linuxlinux_kernel*≥6.7  –  <6.9.6
linuxlinux_kernel6.10any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/03c71c42809ef4b17f5d874cdb2d3bf40e847b86
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b4a8b89bf6787090b56424d269bf84ba00c3263
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2219e5f97244b79c276751a1167615b9714db1b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/39bc27bd688066a63e56f7f64ad34fae03fbe3b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3ae63a8c1685e16958560ec08d30defdc5b9cca0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a508a102edf8735adc9bb73d37dd13c38d1a1b10
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/03c71c42809ef4b17f5d874cdb2d3bf40e847b86
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b4a8b89bf6787090b56424d269bf84ba00c3263
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2219e5f97244b79c276751a1167615b9714db1b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/39bc27bd688066a63e56f7f64ad34fae03fbe3b8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3ae63a8c1685e16958560ec08d30defdc5b9cca0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a508a102edf8735adc9bb73d37dd13c38d1a1b10
    Patch