CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops
In the Linux kernel, the following vulnerability has been resolved:
memcgwriteeventcontrol(): fix a user-triggerable oops
we are not guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45021?
CVE-2024-45021 has a moderate severity level due to its potential to cause a user-triggerable oops in the Linux kernel.
How do I fix CVE-2024-45021?
To resolve CVE-2024-45021, upgrade to the patched versions provided in the advisory, such as linux 5.10.226-1 or 6.1.123-1.
What versions of Linux are affected by CVE-2024-45021?
CVE-2024-45021 affects several versions of the Linux kernel, specifically those prior to the patched releases mentioned in the advisory.
Is CVE-2024-45021 exploitable?
Yes, CVE-2024-45021 is exploitable as it involves a user-triggerable oops condition.
What components in Linux does CVE-2024-45021 impact?
CVE-2024-45021 impacts the memory control group (memcg) component of the Linux kernel.