In the Linux kernel, the following vulnerability has been resolved:

drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)

Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap
allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag
causing a kernel panic due to BUG_ON in vmf_insert_pfn_prot:
BUG_ON((vma->vm_flags & VM_PFNMAP) && is_cow_mapping(vma->vm_flags));

Return -EINVAL early if COW mapping is detected.

This bug affects all drm drivers using default shmem helpers.
It can be reproduced by this simple example:
void *ptr = mmap(0, size, PROT_WRITE, MAP_PRIVATE, fd, mmap_offset);
ptr[0] = 0;

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00028.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/03c71c42809ef4b17f5d874cdb2d3bf40e847b86 cve-icon cve-icon
https://git.kernel.org/stable/c/1b4a8b89bf6787090b56424d269bf84ba00c3263 cve-icon cve-icon
https://git.kernel.org/stable/c/2219e5f97244b79c276751a1167615b9714db1b0 cve-icon cve-icon
https://git.kernel.org/stable/c/39bc27bd688066a63e56f7f64ad34fae03fbe3b8 cve-icon cve-icon
https://git.kernel.org/stable/c/3ae63a8c1685e16958560ec08d30defdc5b9cca0 cve-icon cve-icon
https://git.kernel.org/stable/c/a508a102edf8735adc9bb73d37dd13c38d1a1b10 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024071202-CVE-2024-39497-834c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-39497 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-39497 cve-icon
History

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Fri, 08 Nov 2024 16:00:00 +0000

Type Values Removed Values Added
References

Wed, 06 Nov 2024 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-825
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Tue, 22 Oct 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 14:30:00 +0000

Type Values Removed Values Added
References

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T09:17:04.655Z

Reserved: 2024-06-25T14:23:23.751Z

Link: CVE-2024-39497

cve-icon Vulnrichment

Updated: 2024-08-02T04:26:15.499Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-12T13:15:12.320

Modified: 2024-11-21T09:27:49.350

Link: CVE-2024-39497

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-12T00:00:00Z

Links: CVE-2024-39497 - Bugzilla

cve-icon OpenCVE Enrichment

No data.