CVE-2024-40917

5.5 · MEDIUM

Published Jul 12, 2024 linux EPSS 0.27% (19th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-40917 is a medium-severity vulnerability affecting linux linux_kernel. It was published on July 12, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

memblock: make memblock_set_node() also warn about use of MAX_NUMNODES

On an (old) x86 system with SRAT just covering space above 4Gb:

ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug

the commit referenced below leads to this NUMA configuration no longer

being refused by a CONFIG_NUMA=y kernel (previously

NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.

No NUMA configuration found

Faking a node at [mem 0x0000000000000000-0x000000027fffffff]

was seen in the log directly after the message quoted above), because of

memblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This

in turn led to memblock_alloc_range_nid()'s warning about MAX_NUMNODES

triggering, followed by a NULL deref in memmap_init() when trying to

access node 64's (NODE_SHIFT=6) node data.

To compensate said change, make memblock_set_node() warn on and adjust

a passed in value of MAX_NUMNODES,

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 6.6.70, < 6.6.72	Affected

References

Ref git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4 Ref git.kernel.org/stable/c/4ddb7f966f3d06fcf1ba5ee298af6714b593584b Ref git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7 Ref git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4 Ref git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7

Frequently Asked Questions

What is CVE-2024-40917?

CVE-2024-40917 is a medium-severity vulnerability affecting linux linux_kernel. It was published on July 12, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-40917?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-40917?

How can CyberStrike help with CVE-2024-40917?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-40917 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719