Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-6976-pmhu-9qg3
Vulnerability ID VCID-6976-pmhu-9qg3
Aliases CVE-2024-36881
Summary In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: reset ptes when close() for wr-protected ones Userfaultfd unregister includes a step to remove wr-protect bits from all the relevant pgtable entries, but that only covered an explicit UFFDIO_UNREGISTER ioctl, not a close() on the userfaultfd itself. Cover that too. This fixes a WARN trace. The only user visible side effect is the user can observe leftover wr-protect bits even if the user close()ed on an userfaultfd when releasing the last reference of it. However hopefully that should be harmless, and nothing bad should happen even if so. This change is now more important after the recent page-table-check patch we merged in mm-unstable (446dd9ad37d0 ("mm/page_table_check: support userfault wr-protect entries")), as we'll do sanity check on uffd-wp bits without vma context. So it's better if we can 100% guarantee no uffd-wp bit leftovers, to make sure each report will be valid.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-281 Improper Preservation of Permissions
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-36881.json
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2024-36881
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2024-36881
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2024-36881
cvssv3.1 0 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.5 https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931
ssvc Track https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931
cvssv3.1 5.5 https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d
ssvc Track https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d
cvssv3.1 5.5 https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
ssvc Track https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-36881.json
https://api.first.org/data/v1/epss?cve=CVE-2024-36881
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2284277 https://bugzilla.redhat.com/show_bug.cgi?id=2284277
377f3a9a3d032a52325a5b110379a25dd1ab1931 https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931
8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d
c88033efe9a391e72ba6b5df4b01d6e628f4e734 https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
RHSA-2024:9315 https://access.redhat.com/errata/RHSA-2024:9315
USN-6949-1 https://usn.ubuntu.com/6949-1/
USN-6949-2 https://usn.ubuntu.com/6949-2/
USN-6952-1 https://usn.ubuntu.com/6952-1/
USN-6952-2 https://usn.ubuntu.com/6952-2/
USN-6955-1 https://usn.ubuntu.com/6955-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-36881.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-31T18:32:07Z/ Found at https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-31T18:32:07Z/ Found at https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-31T18:32:07Z/ Found at https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
Exploit Prediction Scoring System (EPSS)
Percentile 0.03422
EPSS Score 0.00015
Published At June 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:50:41.410379+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0