CVE-2024-46739

A flaw was found in the Linux kernel. A local attacker with low privileges could trigger a null pointer dereference in the uio_hv_generic module's hv_uio_rescind function. This occurs when the system attempts to access a memory location that is not properly assigned for primary VM Bus channels. Successful exploitation of this vulnerability could lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To prevent the uio_hv_generic kernel module from loading, create a blacklist entry.

echo "blacklist uio_hv_generic" | sudo tee /etc/modprobe.d/blacklist-uio_hv_generic.conf

After applying this change, regenerate the initramfs and reboot the system for the mitigation to take effect.

sudo dracut -f -v
sudo reboot

This action may affect systems utilizing User-space I/O for Hyper-V virtual machines.