CVE-2024-47745

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it po...

Affected product and versions

Product

Linux Linux, debian linux, linux kernel

Affected versions

>= c8d78c1823f46519473949d33f0d1d33fe21ea16 < 0f910dbf2f2a4a7820ba4bac7b280f7108aa05b1, >= c8d78c1823f46519473949d33f0d1d33fe21ea16 < 49d3a4ad57c57227c3b0fd6cd4188b2a5ebd6178, >= c8d78c1823f46519473949d33f0d1d33fe21ea16 < 3393fddbfa947c8e1fdcc4509226905ffffd8b89, >= c8d78c1823f46519473949d33f0d1d33fe21ea16 < ce14f38d6ee9e88e37ec28427b4b93a7c33c70d3, >= c8d78c1823f46519473949d33f0d1d33fe21ea16 < ea7e2d5e49c05e5db1922387b09ca74aa40f46e2, >= 097f98edde717ce09f217d8a285fe357dcd29fd1, >= 3.16.59 < 3.17, >= 4.0, 11.0, < 6.1.120, >= 6.2 < 6.6.54, >= 6.7 < 6.10.13, >= 6.11 < 6.11.2

Fixed versions

6.1.120, 6.6.54, 6.10.13, 6.11.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-670