CVE-2024-46852

Summary

CVE-2024-46852 is a vulnerability affecting the Linux kernel's dma-buf component. Prior to commit 1c1914d6e8c6, it was possible to obtain a mapping larger than the buffer size using mremap. This bypassed the overflow check in dma_buf_mmap_internal, allowing users to read past the end of the buffer and potentially access arbitrary memory. The vulnerability arose due to an incorrect boundary check in the CMA heap fault handler, which read off the end of the pages array and inserted an arbitrary page in the mapping. The issue has been resolved by fixing the boundary check in the handler.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.