Riskcovery

CVE-2024-49975

uprobes: fix kernel info leak via "[uprobes]" vma

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

uprobes: fix kernel info leak via "[uprobes]" vma

xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesn't really matter, debugger can read this memory anyway.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before f31f92107e5a8ecc8902705122c594e979a351feAffected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before fe5e9182d3e227476642ae2b312e2356c4d326a3Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before f561b48d633ac2e7d0d667020fc634a96ade33a0Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 21cb47db1ec9765f91304763a24565ddc22d2492Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 24141df5a8615790950deedd926a44ddf1dfd6d8Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 5b981d8335e18aef7908a068529a3287258ff6d8Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 2aa45f43709ba2082917bd2973d02687075b6eeeAffected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 9634e8dc964a4adafa7e1535147abd7ec29441a6Affected
  • d4b3b6384f98f8692ad0209891ccdbc7e78bbefe to before 34820304cc2cd1804ee1f8f3504ec77813d29c8eAffected
LinuxLinux
  • 3.5Affected
  • before 3.5Not affected
  • 4.19.323 through 4.19.*Not affected
  • 5.4.285 through 5.4.*Not affected
  • 5.10.227 through 5.10.*Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.