In the Linux kernel, the following vulnerability has been resolved:
uprobes: fix kernel info leak via "[uprobes]" vma
xoladdvma() maps the uninitialized page allocated by _createxolarea() into userspace. On some architectures (x86) this memory is readable even without VMREAD, VMEXEC results in the same pgprott as VMEXEC|VMREAD, although this doesn't really matter, debugger can read this memory anyway.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-069a59c5",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aa45f43709ba2082917bd2973d02687075b6eee",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-0acd99b9",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21cb47db1ec9765f91304763a24565ddc22d2492",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-39e460b5",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b981d8335e18aef7908a068529a3287258ff6d8",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-503fb11f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aa45f43709ba2082917bd2973d02687075b6eee",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-635c7ee2",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f31f92107e5a8ecc8902705122c594e979a351fe",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-65f654ec",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24141df5a8615790950deedd926a44ddf1dfd6d8",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-67342ae7",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe5e9182d3e227476642ae2b312e2356c4d326a3",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-6dafd04c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21cb47db1ec9765f91304763a24565ddc22d2492",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"19627959294944348338026291454920865915",
"111390007586255351574343693194230673196",
"77923063789922956041045869794227013250",
"16238422525252972908772229830531192823"
]
},
"id": "CVE-2024-49975-8dcfccf5",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34820304cc2cd1804ee1f8f3504ec77813d29c8e",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "252598132710726409078402532650786503696",
"length": 792.0
},
"id": "CVE-2024-49975-99efd0b9",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34820304cc2cd1804ee1f8f3504ec77813d29c8e",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-9ba84416",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b981d8335e18aef7908a068529a3287258ff6d8",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-b30d6cd1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe5e9182d3e227476642ae2b312e2356c4d326a3",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-be0fb833",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f31f92107e5a8ecc8902705122c594e979a351fe",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-d875ec8e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f561b48d633ac2e7d0d667020fc634a96ade33a0",
"target": {
"file": "kernel/events/uprobes.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "242810284866470476834741364939824033425",
"length": 923.0
},
"id": "CVE-2024-49975-da798742",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f561b48d633ac2e7d0d667020fc634a96ade33a0",
"target": {
"file": "kernel/events/uprobes.c",
"function": "__create_xol_area"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"114768949372642123124044531328619633630",
"15792648409992526242693162327014171475",
"323755438852110456985883704236969249358",
"78207685651443115441984909941203647954"
]
},
"id": "CVE-2024-49975-f3ae8fff",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24141df5a8615790950deedd926a44ddf1dfd6d8",
"target": {
"file": "kernel/events/uprobes.c"
}
}
]