CVE-2024-39474— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vmalloc在使用__GFP_NOFAIL调用时可能返回null。
影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 9376130c390a76fac2788a5d6e1a149017b4ab50< 198a80833e3421d4c9820a4ae907120adf598c91 |
affected |
9376130c390a76fac2788a5d6e1a149017b4ab50< c55d3564ad25ce87ab7cc6af251f9574faebd8da |
affected | ||
9376130c390a76fac2788a5d6e1a149017b4ab50< 758678b65164b2158fc1de411092191cb3c394d4 |
affected | ||
9376130c390a76fac2788a5d6e1a149017b4ab50< 8e0545c83d672750632f46e3f9ad95c48c91a0fc |
affected | ||
5.17 |
affected | ||
< 5.17 |
unaffected | ||
6.1.95≤ 6.1.* |
unaffected | ||
6.6.34≤ 6.6.* |
unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-39474 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc")
includes support for __GFP_NOFAIL, but it presents a conflict with commit
dd544141b9eb ("vmalloc: back off when the current task is OOM-killed"). A
possible scenario is as follows:
process-a
__vmalloc_node_range(GFP_KERNEL | __GFP_NOFAIL)
__vmalloc_area_node()
vm_area_alloc_pages()
--> oom-killer send SIGKILL to process-a
if (fatal_signal_pending(current)) break;
--> return NULL;
To fix this, do not check fatal_signal_pending() in vm_area_alloc_pages()
if __GFP_NOFAIL set.
This issue occurred during OPLUS KASAN TEST. Below is part of the log
-> oom-killer sends signal to process
[65731.222840] [ T1308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/apps/uid_10198,task=gs.intelligence,pid=32454,uid=10198
[65731.259685] [T32454] Call trace:
[65731.259698] [T32454] dump_backtrace+0xf4/0x118
[65731.259734] [T32454] show_stack+0x18/0x24
[65731.259756] [T32454] dump_stack_lvl+0x60/0x7c
[65731.259781] [T32454] dump_stack+0x18/0x38
[65731.259800] [T32454] mrdump_common_die+0x250/0x39c [mrdump]
[65731.259936] [T32454] ipanic_die+0x20/0x34 [mrdump]
[65731.260019] [T32454] atomic_notifier_call_chain+0xb4/0xfc
[65731.260047] [T32454] notify_die+0x114/0x198
[65731.260073] [T32454] die+0xf4/0x5b4
[65731.260098] [T32454] die_kernel_fault+0x80/0x98
[65731.260124] [T32454] __do_kernel_fault+0x160/0x2a8
[65731.260146] [T32454] do_bad_area+0x68/0x148
[65731.260174] [T32454] do_mem_abort+0x151c/0x1b34
[65731.260204] [T32454] el1_abort+0x3c/0x5c
[65731.260227] [T32454] el1h_64_sync_handler+0x54/0x90
[65731.260248] [T32454] el1h_64_sync+0x68/0x6c
[65731.260269] [T32454] z_erofs_decompress_queue+0x7f0/0x2258
--> be->decompressed_pages = kvcalloc(be->nr_pages, sizeof(struct page *), GFP_KERNEL | __GFP_NOFAIL);
kernel panic by NULL pointer dereference.
erofs assume kvmalloc with __GFP_NOFAIL never return NULL.
[65731.260293] [T32454] z_erofs_runqueue+0xf30/0x104c
[65731.260314] [T32454] z_erofs_readahead+0x4f0/0x968
[65731.260339] [T32454] read_pages+0x170/0xadc
[65731.260364] [T32454] page_cache_ra_unbounded+0x874/0xf30
[65731.260388] [T32454] page_cache_ra_order+0x24c/0x714
[65731.260411] [T32454] filemap_fault+0xbf0/0x1a74
[65731.260437] [T32454] __do_fault+0xd0/0x33c
[65731.260462] [T32454] handle_mm_fault+0xf74/0x3fe0
[65731.260486] [T32454] do_mem_abort+0x54c/0x1b34
[65731.260509] [T32454] el0_da+0x44/0x94
[65731.260531] [T32454] el0t_64_sync_handler+0x98/0xb4
[65731.260553] [T32454] el0t_64_sync+0x198/0x19c
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vmalloc在使用__GFP_NOFAIL调用时可能返回null。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-39474 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-39474 的情报信息
请登录查看更多情报信息。
CVE-2024-39474 补丁与修复 (1)
CVE-2024-39474 其他参考 (3)
同批安全公告 · Linux · 2024-07-05 · 共 14 条
| CVE-2024-39480 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39482 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39481 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39479 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39478 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39477 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39472 | 7.3 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39483 | 7.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39485 | Linux kernel 安全漏洞 | |
| CVE-2024-39484 | Linux kernel 安全漏洞 | |
| CVE-2024-39476 | Linux kernel 安全漏洞 | |
| CVE-2024-39475 | Linux kernel 安全漏洞 | |
| CVE-2024-39473 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2024-39474
暂无评论