MEDIUM Published January 28, 2024

CVE-2024-0841

A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS base score

6.6 (v3.1)

Severity

MEDIUM

Attack vector

Local

Weakness

CWE-476

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

linux linux kernel redhat enterprise linux

References

access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
bugzilla.redhat.com Issue Tracking
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
bugzilla.redhat.com Issue Tracking

View full NVD advisory →

More linux vulnerabilities

← Back to CVE watch

CVE-2024-0841

Affected products

References

More linux vulnerabilities

Related reading