| Summary: |
VUL-0: CVE-2024-27406: kernel: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU |
| Product: |
[Novell Products] SUSE Security Incidents
|
Reporter: |
SMASH SMASH <smash_bz> |
| Component: |
Incidents | Assignee: |
Security Team bot <security-team> |
| Status: |
RESOLVED
INVALID
|
QA Contact: |
Security Team bot <security-team> |
| Severity: |
Normal
|
|
|
| Priority: |
P3 - Medium
|
CC: |
andrea.mattiazzo, gabriele.sonnu, mkoutny
|
| Version: |
unspecified | |
|
| Target Milestone: |
--- | |
|
| Hardware: |
Other | |
|
| OS: |
Other | |
|
| URL: |
https://smash.suse.de/issue/406302/
|
| Whiteboard: |
|
|
Found By:
|
Security Response Team
|
Services Priority:
|
|
|---|
|
Business Priority:
|
|
Blocker:
|
---
|
|---|
|
Marketing QA Status:
|
---
|
IT Deployment:
|
---
|
|---|
In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU Trying to run the iov_iter unit test on a nommu system such as the qemu kc705-nommu emulation results in a crash. KTAP version 1 # Subtest: iov_iter # module: kunit_iov_iter 1..9 BUG: failure at mm/nommu.c:318/vmap()! Kernel panic - not syncing: BUG! The test calls vmap() directly, but vmap() is not supported on nommu systems, causing the crash. TEST_IOV_ITER therefore needs to depend on MMU. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-27406 https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-27406.mbox https://git.kernel.org/stable/c/e6316749d603fe9c4c91f6ec3694e06e4de632a3 https://git.kernel.org/stable/c/9e6e541b97762d5b1143070067f7c68f39a408f8 https://git.kernel.org/stable/c/1eb1e984379e2da04361763f66eec90dd75cf63e https://www.cve.org/CVERecord?id=CVE-2024-27406