CVE-2024-0841: Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function
A flaw in the Linux Kernel found. Null pointer dereference in hugetlbfsfillsuper function for hugetlbfs (HugeTLB pages). The issue presents when we attempt to update the pagesize value to an invalid size with the fsconfig syscall. This syscall will eventually call hugetlbfsparseparam() where we will set the hstate value to null if the value passed is not a valid page size. If we then attempt to update the fs again with a fsconfig syscall, specifically with the FSCONFIGCMDCREATE option, we will then attempt to dereference that null pointer within hugetlbfsfillsuper() causing a panic.
Other sources
A null pointer dereference flaw was found in the hugetlbfsfillsuper function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
— Launchpad
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a NULL pointer dereference flaw in the hugetlbfsfillsuper function in the hugetlbfs (HugeTLB pages) functionality. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges or cause the system to crash.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0841?
CVE-2024-0841 is classified as a low severity vulnerability due to its specific conditions for exploitation.
How do I fix CVE-2024-0841?
To resolve CVE-2024-0841, you should update your Linux Kernel to the recommended versions or later as specified in available patches.
Which versions of the Linux Kernel are affected by CVE-2024-0841?
CVE-2024-0841 affects Linux Kernel versions from 5.1 up to 6.7.6 across various distributions.
Can CVE-2024-0841 be exploited remotely?
CVE-2024-0841 does not allow for remote exploitation as it requires local access to the system.
What components are impacted by CVE-2024-0841?
CVE-2024-0841 impacts the hugetlbfs functionality within the Linux Kernel, specifically related to the fsconfig syscall.