medium
5.5
CWE
459
Advisory Published
Updated

CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case

First published: Tue Oct 15 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw mapping of PFNs with no reference counting of a 'struct page'. That's all very much intentional, but it does mean that it's easy to mess up the cleanup in case of errors. Yes, a failed mmap() will always eventually clean up any partial mappings, but without any explicit lifetime in the page table mapping itself, it's very easy to do the error handling in the wrong order. In particular, it's easy to mistakenly free the physical backing store before the page tables are actually cleaned up and (temporarily) have stale dangling PTE entries. To make this situation less error-prone, just make sure that any partial pfn mapping is torn down early, before any other error handling.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected SoftwareAffected VersionHow to fix
Linux Kernel<5.15.168
Linux Kernel>=5.16<6.1.111
Linux Kernel>=6.2<6.6.52
Linux Kernel>=6.7<6.10.11
Linux Kernel=6.11-rc1
Linux Kernel=6.11-rc2
Linux Kernel=6.11-rc3
Linux Kernel=6.11-rc4
Linux Kernel=6.11-rc5
Linux Kernel=6.11-rc6
Linux Kernel=6.11-rc7
debian/linux<=5.10.223-1<=5.10.226-1
6.1.123-1
6.1.128-1
6.12.12-1
6.12.13-1
debian/linux-6.1
6.1.119-1~deb11u1

Remedy

https://git.kernel.org/stable/c/5b2c8b34f6d76bfbd1dd4936eb8a0fbfb9af3959

Remedy

https://git.kernel.org/stable/c/65d0db500d7c07f0f76fc24a4d837791c4862cd2

Remedy

https://git.kernel.org/stable/c/79a61cc3fc0466ad2b7b89618a6157785f0293b3

Remedy

https://git.kernel.org/stable/c/954fd4c81f22c4b6ba65379a81fd252971bf4ef3

Remedy

https://git.kernel.org/stable/c/a95a24fcaee1b892e47d5e6dcc403f713874ee80

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2024-47674?

    CVE-2024-47674 is categorized as a medium severity vulnerability in the Linux kernel.

  • How do I fix CVE-2024-47674?

    To mitigate CVE-2024-47674, upgrade to the recommended kernel version or apply the appropriate patches from your distribution.

  • Which Linux kernel versions are affected by CVE-2024-47674?

    CVE-2024-47674 affects Linux kernel versions from 5.16 up to 6.10.11, as well as several release candidates.

  • What does CVE-2024-47674 exploit in the Linux kernel?

    CVE-2024-47674 exploits a vulnerability related to partial page frame number mappings in the memory management subsystem.

  • Is CVE-2024-47674 a remote or local vulnerability?

    CVE-2024-47674 is considered a local vulnerability as it requires local access to the affected system to exploit.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203