CVE-2024-56678

A flaw was found in the PowerPC architecture's memory fault handling in the Linux kernel. When reading from /proc/kcore, the kernel may incorrectly attempt to handle faults on KFENCE-allocated memory regions using the KFENCE mechanism instead of the appropriate fixup table. This misbehavior can lead to false-positive reports of memory errors, including invalid reads and use-after-free conditions. A local attacker could exploit this by triggering reads on unmapped or freed KFENCE objects, potentially causing a denial of service or confusing kernel debugging tools.

Only privileged local user can trigger this bug, so the security impact is limited.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.