CVE-2024-26901: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
dosysnametohandle(): use kzalloc() to fix kernel-infoleak
Other sources
Linux Kernel is vulnerable to a denial of service, caused by the failure to use kzalloc() to fix kernel-infoleak. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26901?
CVE-2024-26901 is classified as a kernel information leak vulnerability affecting the Linux kernel.
How do I fix CVE-2024-26901?
To fix CVE-2024-26901, update the Linux kernel to version 4.19.311 or later, 5.4.273 or later, 5.10.214 or later, 5.15.153 or later, 6.1.83 or later, 6.6.23 or later, 6.7.11 or later, 6.8.2 or later, or 6.9.
Which versions of the Linux kernel are affected by CVE-2024-26901?
CVE-2024-26901 affects Linux kernel versions from 2.6.39 up to 6.9.
Is CVE-2024-26901 a remote vulnerability?
CVE-2024-26901 primarily involves a local information leak in the kernel, not a remote vulnerability.
Can I check if my system is affected by CVE-2024-26901?
You can check your Linux kernel version using the command 'uname -r' to determine if your system is vulnerable to CVE-2024-26901.