{ "id": "CVE-2024-46792", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-09-18T08:15:06.123", "lastModified": "2024-09-20T12:30:51.220", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: misaligned: Restrict user access to kernel memory\n\nraw_copy_{to,from}_user() do not call access_ok(), so this code allowed\nuserspace to access any virtual memory address." }, { "lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: riscv: misaligned: Restringe el acceso del usuario a la memoria del kernel raw_copy_{to,from}_user() no llama a access_ok(), por lo que este c\u00f3digo permit\u00eda que el espacio de usuario accediera a cualquier direcci\u00f3n de memoria virtual." } ], "metrics": {}, "references": [ { "url": "https://git.kernel.org/stable/c/a3b6ff6c896aee5ef9b581e40d0045ff04fcbc8c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/b686ecdeacf6658e1348c1a32a08e2e72f7c0f00", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" } ] }