CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux.
CVE
CVE-2024-47676
Severity
HIGH
CVSS
7.8
EPSS
0.24%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlb_fault(). This happens because vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA to be freed before hugetlb_vma_unlock_read() is called. We can fix this by using a modified version of vmf_anon_prepare() that doesn't release the VMA lock on failure, and then release it ourselves after hugetlb_vma_unlock_read().
Related CVEs
Other vulnerabilities affecting the same vendor(s)