CVE-2024-46852

A flaw was found in the Linux kernel, specifically within the dma-buf subsystem's Contiguous Memory Allocator (CMA) heap fault handler. A local attacker could exploit an off-by-one error to gain a memory mapping larger than intended. This vulnerability allows the attacker to read beyond the boundaries of allocated memory and insert an arbitrary memory page into the mapping. Such an action could lead to privilege escalation, allowing the attacker to gain higher system permissions, or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.