CVE - CVE-2024-39497

CVE-ID
CVE-2024-39497	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag causing a kernel panic due to BUG_ON in vmf_insert_pfn_prot: BUG_ON((vma->vm_flags & VM_PFNMAP) && is_cow_mapping(vma->vm_flags)); Return -EINVAL early if COW mapping is detected. This bug affects all drm drivers using default shmem helpers. It can be reproduced by this simple example: void *ptr = mmap(0, size, PROT_WRITE, MAP_PRIVATE, fd, mmap_offset); ptr[0] = 0;
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/03c71c42809ef4b17f5d874cdb2d3bf40e847b86 URL:https://git.kernel.org/stable/c/03c71c42809ef4b17f5d874cdb2d3bf40e847b86 MISC:https://git.kernel.org/stable/c/1b4a8b89bf6787090b56424d269bf84ba00c3263 URL:https://git.kernel.org/stable/c/1b4a8b89bf6787090b56424d269bf84ba00c3263 MISC:https://git.kernel.org/stable/c/2219e5f97244b79c276751a1167615b9714db1b0 URL:https://git.kernel.org/stable/c/2219e5f97244b79c276751a1167615b9714db1b0 MISC:https://git.kernel.org/stable/c/39bc27bd688066a63e56f7f64ad34fae03fbe3b8 URL:https://git.kernel.org/stable/c/39bc27bd688066a63e56f7f64ad34fae03fbe3b8 MISC:https://git.kernel.org/stable/c/3ae63a8c1685e16958560ec08d30defdc5b9cca0 URL:https://git.kernel.org/stable/c/3ae63a8c1685e16958560ec08d30defdc5b9cca0 MISC:https://git.kernel.org/stable/c/a508a102edf8735adc9bb73d37dd13c38d1a1b10 URL:https://git.kernel.org/stable/c/a508a102edf8735adc9bb73d37dd13c38d1a1b10
Assigning CNA
kernel.org
Date Record Created
20240625	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240625)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)