CVE-2024-47688

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

driver core: Fix a potential null-ptr-deref in module_add_driver()

Inject fault while probing of-fpga-region, if kasprintf() fails in

module_add_driver(), the second sysfs_remove_link() in exit path will cause

null-ptr-deref as below because kernfs_name_hash() will call strlen() with

NULL driver_name.

Fix it by releasing resources based on the exit path sequence.

KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]

Mem abort info:

ESR = 0x0000000096000005

EC = 0x25: DABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x05: level 1 translation fault

Data abort info:

ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000

CM = 0, WnR = 0, TnD = 0, TagAccess = 0

GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0

[dfffffc000000000] address between user and kernel address ranges

Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP

Dumping ftrace buffer:

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References