CVE-2024-50099

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

arm64: probes: Remove broken LDR (literal) uprobe support

The simulate_ldr_literal() and simulate_ldrsw_literal() functions are

unsafe to use for uprobes. Both functions were originally written for

use with kprobes, and access memory with plain C accesses. When uprobes

was added, these were reused unmodified even though they cannot safely

access user memory.

There are three key problems:

1) The plain C accesses do not have corresponding extable entries, and

thus if they encounter a fault the kernel will treat these as

unintentional accesses to user memory, resulting in a BUG() which

will kill the kernel thread, and likely lead to further issues (e.g.

lockup or panic()).

2) The plain C accesses are subject to HW PAN and SW PAN, and so when

either is in use, any attempt to simulate an access to user memory

will fault. Thus neither simulate_ldr_literal() nor

simulate_ldrsw_literal() can do anythi

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References