CVE-2024-26785

5.5 · MEDIUM

Published Apr 4, 2024 linux CWE-120 EPSS 0.23% (13th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-26785 is a medium-severity vulnerability affecting linux linux_kernel. It was published on April 4, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Fix protection fault in iommufd_test_syz_conv_iova

Syzkaller reported the following bug:

general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN

KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7]

Call Trace:

lock_acquire

lock_acquire+0x1ce/0x4f0

down_read+0x93/0x4a0

iommufd_test_syz_conv_iova+0x56/0x1f0

iommufd_test_access_rw.isra.0+0x2ec/0x390

iommufd_test+0x1058/0x1e30

iommufd_fops_ioctl+0x381/0x510

vfs_ioctl

__do_sys_ioctl

__se_sys_ioctl

__x64_sys_ioctl+0x170/0x1e0

do_syscall_x64

do_syscall_64+0x71/0x140

This is because the new iommufd_access_change_ioas() sets access->ioas to

NULL during its process, so the lock might be gone in a concurrent racing

context.

Fix this by doing the same access->ioas sanity as iommufd_access_rw() and

iommufd_access_pin_pages() functions do.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 6.6, < 6.7.9	Affected

References

Ref git.kernel.org/stable/c/cf7c2789822db8b5efa34f5ebcf1621bc0008d48 Ref git.kernel.org/stable/c/fc719ecbca45c9c046640d72baddba3d83e0bc0b Ref git.kernel.org/stable/c/fd4d5cd7a2e8f08357c9bfc0905957cffe8ce568 Ref git.kernel.org/stable/c/cf7c2789822db8b5efa34f5ebcf1621bc0008d48 Ref git.kernel.org/stable/c/fc719ecbca45c9c046640d72baddba3d83e0bc0b

Frequently Asked Questions

What is CVE-2024-26785?

CVE-2024-26785 is a medium-severity vulnerability affecting linux linux_kernel. It was published on April 4, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-26785?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-26785?

How can CyberStrike help with CVE-2024-26785?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-26785 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719