Resource exhaustion in Linux
CVE-2024-45014
In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid possible physmem_info segment corruption When physical memory for the kernel image is allocated it does not consider extra memory required for offsetting the image start to match it with the lower 20 bits of KASLR virtual base address. That might lead to kernel access beyond its memory range.
EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 693d41f7c938f92d881e6a51525e6c132a186afd, 6.10, 0
- Linux Linux_kernel — versions 6.11
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-45014?
- CVE-2024-45014 is a medium-severity vulnerability in Linux, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.5/10. Published 2024-09-11.
- How severe is CVE-2024-45014?
- Medium severity. CVSS v3 base score is 5.5 out of 10.