QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-49975

Back to search

CVE-2024-49975

Published: Oct 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "[uprobes]" vma xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesn't really matter, debugger can read this memory anyway.

VendorProductVersions

Linux

Linux

affected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe - < f31f92107e5a8ecc8902705122c594e979a351fe
affected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe - < fe5e9182d3e227476642ae2b312e2356c4d326a3
affected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe - < f561b48d633ac2e7d0d667020fc634a96ade33a0
affected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe - < 21cb47db1ec9765f91304763a24565ddc22d2492
affected
d4b3b6384f98f8692ad0209891ccdbc7e78bbefe - < 24141df5a8615790950deedd926a44ddf1dfd6d8

+4 more versions

Linux

Linux

affected
3.5
unaffected
0 - < 3.5
unaffected
4.19.323 - <= 4.19.*
unaffected
5.4.285 - <= 5.4.*
unaffected
5.10.227 - <= 5.10.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now