CVE-2024-26920: tracing/trigger: Fix to return error if failed to alloc snapshot
In the Linux kernel, the following vulnerability has been resolved:
tracing/trigger: Fix to return error if failed to alloc snapshot
Fix registersnapshottrigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
tracing/trigger: Fix to return error if failed to alloc snapshot
The Linux kernel CVE team has assigned CVE-2024-26920 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041738-CVE-2024-26920-a681@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26920?
CVE-2024-26920 has a medium severity level due to potential issues in Linux kernel snapshot allocation.
How do I fix CVE-2024-26920?
To fix CVE-2024-26920, upgrade to the appropriate kernel versions specified in the vulnerability description.
What versions of the Linux kernel are affected by CVE-2024-26920?
CVE-2024-26920 affects multiple versions, including kernel 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.79, and several others listed.
Can CVE-2024-26920 lead to system instability?
Yes, CVE-2024-26920 can lead to system instability if the kernel fails to properly allocate a snapshot.
Is CVE-2024-26920 a remote exploit risk?
CVE-2024-26920 is primarily a local vulnerability and poses limited risk of remote exploitation.