Security Advisory

CVE-2024-49975

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-21 18:02:23

Last updated 2026-05-11 20:43:09

Assigner Linux

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "[uprobes]" vma xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesnt really matter, debugger can read this memory anyway.

← Browse all CVEs View on cve.org ↗