目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2024-39474— Linux kernel 安全漏洞

AI 预测 5.3 利用难度: 中等 EPSS 0.22% · P13

影响版本矩阵 10

厂商产品版本范围状态
LinuxLinux9376130c390a76fac2788a5d6e1a149017b4ab50< 198a80833e3421d4c9820a4ae907120adf598c91affected
9376130c390a76fac2788a5d6e1a149017b4ab50< c55d3564ad25ce87ab7cc6af251f9574faebd8daaffected
9376130c390a76fac2788a5d6e1a149017b4ab50< 758678b65164b2158fc1de411092191cb3c394d4affected
9376130c390a76fac2788a5d6e1a149017b4ab50< 8e0545c83d672750632f46e3f9ad95c48c91a0fcaffected
5.17affected
< 5.17unaffected
6.1.95≤ 6.1.*unaffected
6.6.34≤ 6.6.*unaffected
… +2 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2024-39474 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc") includes support for __GFP_NOFAIL, but it presents a conflict with commit dd544141b9eb ("vmalloc: back off when the current task is OOM-killed"). A possible scenario is as follows: process-a __vmalloc_node_range(GFP_KERNEL | __GFP_NOFAIL) __vmalloc_area_node() vm_area_alloc_pages() --> oom-killer send SIGKILL to process-a if (fatal_signal_pending(current)) break; --> return NULL; To fix this, do not check fatal_signal_pending() in vm_area_alloc_pages() if __GFP_NOFAIL set. This issue occurred during OPLUS KASAN TEST. Below is part of the log -> oom-killer sends signal to process [65731.222840] [ T1308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/apps/uid_10198,task=gs.intelligence,pid=32454,uid=10198 [65731.259685] [T32454] Call trace: [65731.259698] [T32454] dump_backtrace+0xf4/0x118 [65731.259734] [T32454] show_stack+0x18/0x24 [65731.259756] [T32454] dump_stack_lvl+0x60/0x7c [65731.259781] [T32454] dump_stack+0x18/0x38 [65731.259800] [T32454] mrdump_common_die+0x250/0x39c [mrdump] [65731.259936] [T32454] ipanic_die+0x20/0x34 [mrdump] [65731.260019] [T32454] atomic_notifier_call_chain+0xb4/0xfc [65731.260047] [T32454] notify_die+0x114/0x198 [65731.260073] [T32454] die+0xf4/0x5b4 [65731.260098] [T32454] die_kernel_fault+0x80/0x98 [65731.260124] [T32454] __do_kernel_fault+0x160/0x2a8 [65731.260146] [T32454] do_bad_area+0x68/0x148 [65731.260174] [T32454] do_mem_abort+0x151c/0x1b34 [65731.260204] [T32454] el1_abort+0x3c/0x5c [65731.260227] [T32454] el1h_64_sync_handler+0x54/0x90 [65731.260248] [T32454] el1h_64_sync+0x68/0x6c [65731.260269] [T32454] z_erofs_decompress_queue+0x7f0/0x2258 --> be->decompressed_pages = kvcalloc(be->nr_pages, sizeof(struct page *), GFP_KERNEL | __GFP_NOFAIL); kernel panic by NULL pointer dereference. erofs assume kvmalloc with __GFP_NOFAIL never return NULL. [65731.260293] [T32454] z_erofs_runqueue+0xf30/0x104c [65731.260314] [T32454] z_erofs_readahead+0x4f0/0x968 [65731.260339] [T32454] read_pages+0x170/0xadc [65731.260364] [T32454] page_cache_ra_unbounded+0x874/0xf30 [65731.260388] [T32454] page_cache_ra_order+0x24c/0x714 [65731.260411] [T32454] filemap_fault+0xbf0/0x1a74 [65731.260437] [T32454] __do_fault+0xd0/0x33c [65731.260462] [T32454] handle_mm_fault+0xf74/0x3fe0 [65731.260486] [T32454] do_mem_abort+0x54c/0x1b34 [65731.260509] [T32454] el0_da+0x44/0x94 [65731.260531] [T32454] el0t_64_sync_handler+0x98/0xb4 [65731.260553] [T32454] el0t_64_sync+0x198/0x19c
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vmalloc在使用__GFP_NOFAIL调用时可能返回null。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux 9376130c390a76fac2788a5d6e1a149017b4ab50 ~ 198a80833e3421d4c9820a4ae907120adf598c91 -
LinuxLinux 5.17 -

二、漏洞 CVE-2024-39474 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2024-39474 的情报信息

请登录查看更多情报信息。

CVE-2024-39474 补丁与修复 (1)

CVE-2024-39474 其他参考 (3)

同批安全公告 · Linux · 2024-07-05 · 共 14 条

CVE-2024-394808.4 HIGHLinux kernel 安全漏洞
CVE-2024-394827.8 HIGHLinux kernel 安全漏洞
CVE-2024-394817.8 HIGHLinux kernel 安全漏洞
CVE-2024-394797.8 HIGHLinux kernel 安全漏洞
CVE-2024-394787.8 HIGHLinux kernel 安全漏洞
CVE-2024-394777.8 HIGHLinux kernel 安全漏洞
CVE-2024-394727.3 HIGHLinux kernel 安全漏洞
CVE-2024-394837.1 HIGHLinux kernel 安全漏洞
CVE-2024-39485Linux kernel 安全漏洞
CVE-2024-39484Linux kernel 安全漏洞
CVE-2024-39476Linux kernel 安全漏洞
CVE-2024-39475Linux kernel 安全漏洞
CVE-2024-39473Linux kernel 安全漏洞

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-39474

暂无评论

发表评论