In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_device_evict_chunk() will return null if the physical memory has run out. As a result, if src_pfns or dst_pfns is dereferenced, the null pointer dereference bug will happen. Moreover, the device is going away. If the kcalloc() fails, the pages mapping a chunk could not be evicted. So add a __GFP_NOFAIL flag in kcalloc(). Finally, as there is no need to have physically contiguous memory, Switch kcalloc() to kvcalloc() in order to avoid failing allocations.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.26.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:4583 2024-07-17T00:00:00Z
kernel-0:5.14.0-427.26.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:4583 2024-07-17T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/1a21fdeea502658e315bd939409b755974f4fb64 cve-icon cve-icon
https://git.kernel.org/stable/c/3b20d18f475bd17309db640dbe7d7c7ebb5bc2bc cve-icon cve-icon
https://git.kernel.org/stable/c/65e528a69cb3ed4a286c45b4afba57461c8b5b33 cve-icon cve-icon
https://git.kernel.org/stable/c/c2af060d1c18beaec56351cf9c9bcbbc5af341a3 cve-icon cve-icon
https://git.kernel.org/stable/c/ce47e8ead9a72834cc68431d53f8092ce69bebb7 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024061948-CVE-2024-38543-ff2e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-38543 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-38543 cve-icon
History

Tue, 05 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 29 Aug 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-19T13:35:17.994Z

Updated: 2024-11-05T09:29:34.432Z

Reserved: 2024-06-18T19:36:34.919Z

Link: CVE-2024-38543

cve-icon Vulnrichment

Updated: 2024-08-02T04:12:25.183Z

cve-icon NVD

Status : Modified

Published: 2024-06-19T14:15:14.587

Modified: 2024-11-21T09:26:18.130

Link: CVE-2024-38543

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-06-19T00:00:00Z

Links: CVE-2024-38543 - Bugzilla