CVE-2024-26920: tracing/trigger: Fix to return error if failed to alloc snapshot
In the Linux kernel, the following vulnerability has been resolved:
tracing/trigger: Fix to return error if failed to alloc snapshot
Fix registersnapshottrigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
tracing/trigger: Fix to return error if failed to alloc snapshot
The Linux kernel CVE team has assigned CVE-2024-26920 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041738-CVE-2024-26920-a681@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.19.307 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.4.269 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.210 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.149 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.79 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.18 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26920?
CVE-2024-26920 has a medium severity level due to potential issues in Linux kernel snapshot allocation.
How do I fix CVE-2024-26920?
To fix CVE-2024-26920, upgrade to the appropriate kernel versions specified in the vulnerability description.
What versions of the Linux kernel are affected by CVE-2024-26920?
CVE-2024-26920 affects multiple versions, including kernel 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.79, and several others listed.
Can CVE-2024-26920 lead to system instability?
Yes, CVE-2024-26920 can lead to system instability if the kernel fails to properly allocate a snapshot.
Is CVE-2024-26920 a remote exploit risk?
CVE-2024-26920 is primarily a local vulnerability and poses limited risk of remote exploitation.