CVE-2024-50132: tracing/probes: Fix MAX_TRACE_ARGS limit handling
In the Linux kernel, the following vulnerability has been resolved:
tracing/probes: Fix MAXTRACEARGS limit handling
When creating a traceprobe we would set nrargs prior to truncating the arguments to MAXTRACEARGS. However, we would only initialize arguments up to the limit.
This caused invalid memory access when attempting to set up probes with more than 128 fetchargs.
BUG: kernel NULL pointer dereference, address: 0000000000000020 #PF: supervisor read access in kernel mode #PF: errorcode(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 0 UID: 0 PID: 1769 Comm: cat Not tainted 6.11.0-rc7+ #8 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014 RIP: 0010:setprintfmt+0x134/0x330
Resolve the issue by applying the MAXTRACEARGS limit earlier. Return an error when there are too many arguments instead of silently truncating.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.21-1Fixed in 6.12.22-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 6.11.0-rc7+ #8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50132?
CVE-2024-50132 is considered a low severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50132?
To fix CVE-2024-50132, update your Linux kernel to a version higher than 6.11.6 or apply the relevant patches provided by the Linux kernel maintainers.
Which versions of the Linux kernel are affected by CVE-2024-50132?
CVE-2024-50132 affects Linux kernel versions from 6.9 up to 6.11.6 and specific release candidates of 6.12.
What impact does CVE-2024-50132 have on kernel tracing?
CVE-2024-50132 addresses an issue in kernel tracing where the argument limit was not properly enforced, potentially leading to unexpected behavior.
Is CVE-2024-50132 present in stable releases of the Linux kernel?
Yes, CVE-2024-50132 has been resolved in specific stable releases and release candidate versions of the Linux kernel.