CVE-2024-26947: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.24 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.12 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8.3 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.24 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.7.12 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.8.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.14-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ARM: 9359/1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26947?
CVE-2024-26947 is categorized as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26947?
To remediate CVE-2024-26947, update the Linux kernel to versions 6.6.24, 6.7.12, 6.8.3, 6.9, or specific patches in Debian Linux.
What systems are affected by CVE-2024-26947?
CVE-2024-26947 affects the Linux kernel across various distributions including Red Hat and Debian.
What are the potential risks of CVE-2024-26947?
Exploitation of CVE-2024-26947 could lead to unauthorized access or manipulation of system memory.
What is the nature of the vulnerability in CVE-2024-26947?
The vulnerability in CVE-2024-26947 involves improper checking of reserved memory addresses in the ARM architecture of the Linux kernel.