CVE-2024-26946

kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address

Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the address is in text or not. Syzcaller bot found a bug and reported the case if user specifies inaccessible data area, arch_adjust_kprobe_addr() will cause a kernel panic.

[ mingo: Clarified the comment. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 6417684315087904fffe8966d27ca74398c57dd6Affected cc66bb91457827f62e2b6cb2518666820f0a6c48 to before f13edd1871d4fb4ab829aff629d47914e251bae3Affected cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 20fdb21eabaeb8f78f8f701f56d14ea0836ec861Affected cc66bb91457827f62e2b6cb2518666820f0a6c48 to before b69f577308f1070004cafac106dd1a44099e5483Affected cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 4e51653d5d871f40f1bd5cf95cc7f2d8b33d063bAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 6417684315087904fffe8966d27ca74398c57dd6Affected
cc66bb91457827f62e2b6cb2518666820f0a6c48 to before f13edd1871d4fb4ab829aff629d47914e251bae3Affected
cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 20fdb21eabaeb8f78f8f701f56d14ea0836ec861Affected
cc66bb91457827f62e2b6cb2518666820f0a6c48 to before b69f577308f1070004cafac106dd1a44099e5483Affected
cc66bb91457827f62e2b6cb2518666820f0a6c48 to before 4e51653d5d871f40f1bd5cf95cc7f2d8b33d063bAffected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.