Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-46792

riscv: misaligned: Restrict user access to kernel memory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7c83232161f609bbc452a1255f823f41afc411dd to < a3b6ff6c896aee5ef9b581e40d0045ff04fcbc8caffected
  • 7c83232161f609bbc452a1255f823f41afc411dd to < b686ecdeacf6658e1348c1a32a08e2e72f7c0f00affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References