01 Record

CVE-2024-47674

mm: avoid leaving partial pfn mappings around in error case

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

mm: avoid leaving partial pfn mappings around in error case

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 16.0% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-15 10:48Z1 YR AGO

Last updated

2026-08-05 11:39Z1 MO AGO

Reserved

2024-09-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-459Incomplete CleanupBase
CWE-20Improper Input ValidationClass

Data version

5.2

Document digest

d90a722d0694b0621f5138b5a91af68129adff75e8d1c88d455991d4a916eaaf

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb97a50adb37e98b940a30c4656565ff609aa8f94 to < 3213fdcab961026203dd587a4533600c70b3336b, 69d4e1ce9087c8767f2fe9b9426fa2755c8e9072 to < 35770ca6180caa24a2b258c99a87bd437a1ee10f, 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e to < 5b2c8b34f6d76bfbd1dd4936eb8a0fbfb9af3959, 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e to < 65d0db500d7c07f0f76fc24a4d837791c4862cd2, 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e to < a95a24fcaee1b892e47d5e6dcc403f713874ee80, 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e to < 954fd4c81f22c4b6ba65379a81fd252971bf4ef3, 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e to < 79a61cc3fc0466ad2b7b89618a6157785f0293b3, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/3213fdcab961026203dd587a4533600c70b3336b
git.kernel.orghttps://git.kernel.org/stable/c/35770ca6180caa24a2b258c99a87bd437a1ee10f
git.kernel.orghttps://git.kernel.org/stable/c/5b2c8b34f6d76bfbd1dd4936eb8a0fbfb9af3959
git.kernel.orghttps://git.kernel.org/stable/c/65d0db500d7c07f0f76fc24a4d837791c4862cd2
git.kernel.orghttps://git.kernel.org/stable/c/a95a24fcaee1b892e47d5e6dcc403f713874ee80
git.kernel.orghttps://git.kernel.org/stable/c/954fd4c81f22c4b6ba65379a81fd252971bf4ef3
git.kernel.orghttps://git.kernel.org/stable/c/79a61cc3fc0466ad2b7b89618a6157785f0293b3
project-zero.issues.chromium.orghttps://project-zero.issues.chromium.org/issues/366053091
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

01 Record index

CVE-2024-47674

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-47674

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References