Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-47674— mm: avoid leaving partial pfn mappings around in error case

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm模块在某些情况下会遗留部分 pfn 映射。

CVSS 7.8 · High EPSS 0.25% · P15

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux b97a50adb37e98b940a30c4656565ff609aa8f94< 3213fdcab961026203dd587a4533600c70b3336b affected
69d4e1ce9087c8767f2fe9b9426fa2755c8e9072< 35770ca6180caa24a2b258c99a87bd437a1ee10f affected
74ffa5a3e68504dd289135b1cf0422c19ffb3f2e< 5b2c8b34f6d76bfbd1dd4936eb8a0fbfb9af3959 affected
74ffa5a3e68504dd289135b1cf0422c19ffb3f2e< 65d0db500d7c07f0f76fc24a4d837791c4862cd2 affected
74ffa5a3e68504dd289135b1cf0422c19ffb3f2e< a95a24fcaee1b892e47d5e6dcc403f713874ee80 affected
74ffa5a3e68504dd289135b1cf0422c19ffb3f2e< 954fd4c81f22c4b6ba65379a81fd252971bf4ef3 affected
74ffa5a3e68504dd289135b1cf0422c19ffb3f2e< 79a61cc3fc0466ad2b7b89618a6157785f0293b3 affected
5.13 affected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-47674

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mm: avoid leaving partial pfn mappings around in error case
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw mapping of PFNs with no reference counting of a 'struct page'. That's all very much intentional, but it does mean that it's easy to mess up the cleanup in case of errors. Yes, a failed mmap() will always eventually clean up any partial mappings, but without any explicit lifetime in the page table mapping itself, it's very easy to do the error handling in the wrong order. In particular, it's easy to mistakenly free the physical backing store before the page tables are actually cleaned up and (temporarily) have stale dangling PTE entries. To make this situation less error-prone, just make sure that any partial pfn mapping is torn down early, before any other error handling.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm模块在某些情况下会遗留部分 pfn 映射。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b97a50adb37e98b940a30c4656565ff609aa8f94 ~ 3213fdcab961026203dd587a4533600c70b3336b -
Linux Linux 5.13 -

II. Public POCs for CVE-2024-47674

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-47674

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-47674 (3)

Vendor Advisories for CVE-2024-47674 (1)

Other References for CVE-2024-47674 (1)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-47674

No comments yet

Leave a comment