CVE-2024-45021

memcg_write_event_control(): fix a user-triggerable oops

State: Published
Severity: 7.1 High
Published: Sep 11, 2024
Updated: Aug 5, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

memcg_write_event_control(): fix a user-triggerable oops

we are *not* guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane).

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before fa5bfdf6cb5846a00e712d630a43e3cf55ccb411Affected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 1b37ec85ad95b612307627758c6018cd9d92cca8Affected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before ad149f5585345e383baa65f1539d816cd715fd3bAffected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 0fbe2a72e853a1052abe9bc2b7df8ddb102da227Affected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 43768fa80fd192558737e24ed6548f74554611d7Affected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before f1aa7c509aa766080db7ab3aec2e31b1df09e57cAffected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 21b578f1d599edb87462f11113c5b0fc7a04ac61Affected 0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 046667c4d3196938e992fba0dfcde570aa85cd0eAffected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 4.19.321 through 4.19.Not affected 5.4.283 through 5.4.Not affected 5.10.225 through 5.10.Not affected 5.15.166 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before fa5bfdf6cb5846a00e712d630a43e3cf55ccb411Affected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 1b37ec85ad95b612307627758c6018cd9d92cca8Affected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before ad149f5585345e383baa65f1539d816cd715fd3bAffected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 0fbe2a72e853a1052abe9bc2b7df8ddb102da227Affected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 43768fa80fd192558737e24ed6548f74554611d7Affected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before f1aa7c509aa766080db7ab3aec2e31b1df09e57cAffected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 21b578f1d599edb87462f11113c5b0fc7a04ac61Affected
0dea116876eefc9c7ca9c5d74fe665481e499fa3 to before 046667c4d3196938e992fba0dfcde570aa85cd0eAffected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
4.19.321 through 4.19.*Not affected
5.4.283 through 5.4.*Not affected
5.10.225 through 5.10.*Not affected
5.15.166 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.