High severity7.8NVD Advisory· Published Oct 21, 2024· Updated Aug 4, 2026
CVE-2024-47676
CVE-2024-47676
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
Syzbot reports a UAF in hugetlb_fault(). This happens because vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA to be freed before hugetlb_vma_unlock_read() is called.
We can fix this by using a modified version of vmf_anon_prepare() that doesn't release the VMA lock on failure, and then release it ourselves after hugetlb_vma_unlock_read().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14- osv-coords11 versionspkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:linux/kernelpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/kernel-source-longterm&distro=openSUSE%20Tumbleweedpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]?arch=source&distro=oracular
< 6.11.0-1009.9+ 10 more
- (no CPE)range: < 6.11.0-1009.9
- (no CPE)range: < 6.11.0-1008.8
- (no CPE)range: >= 6.9.0, < 6.10.13
- (no CPE)range: < 6.11.0-1009.10
- (no CPE)range: < 6.11.8-1.1
- (no CPE)range: < 6.12.11-1.1
- (no CPE)range: < 6.11.0-1011.12
- (no CPE)range: < 6.11.0-1005.5
- (no CPE)range: < 6.11.0-1009.9
- (no CPE)range: < 6.11.0-18.18
- (no CPE)range: < 6.11.0-1010.11
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.