CVE-2024-42267: riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
In the Linux kernel, the following vulnerability has been resolved:
riscv/mm: Add handling for VMFAULTSIGSEGV in mmfaulterror()
Handle VMFAULTSIGSEGV in the page fault path so that we correctly kill the process and we don't BUG() the kernel.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42267?
CVE-2024-42267 has been categorized as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42267?
To fix CVE-2024-42267, update the Linux kernel to version 6.1.123-1 or later, 6.1.119-1 or later, 6.12.10-1 or later, or 6.12.11-1.
What software is affected by CVE-2024-42267?
CVE-2024-42267 affects specific versions of the Linux kernel, particularly those prior to 5.10.226-1.
What is the impact of CVE-2024-42267 vulnerable processes?
The impact of CVE-2024-42267 can lead to a process crash without proper handling of segmentation faults.
Is there a chance of exploitation with CVE-2024-42267?
Yes, exploitation of CVE-2024-42267 can potentially lead to denial of service by crashing affected processes.