CVE-2024-47676: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-47676 affects the Linux kernel's hugetlb fault pathway implementation. The vulnerability was discovered by Syzbot and involves a Use-After-Free (UAF) condition in the hugetlbfault() function. This occurs because vmfanonprepare() could drop the per-VMA lock and allow the current VMA to be freed before hugetlbvmaunlockread() is called (Kernel Patch).

The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The issue is classified as CWE-416 (Use After Free). The bug occurs in mm/hugetlb.c where the vmfanonprepare() function could release the VMA lock on failure, potentially leading to a use-after-free condition before hugetlbvmaunlock_read() is called (NVD).

The vulnerability affects Linux kernel versions from 6.9 up to (excluding) 6.10.13 and versions from 6.11 up to (excluding) 6.11.2. If exploited, it could potentially lead to privilege escalation, information disclosure, or system crashes due to the use-after-free condition (NVD).

The issue has been fixed by modifying the code to use _vmfanonprepare() instead of vmfanon_prepare(), ensuring the VMA lock isn't released on failure. The fix has been implemented in the Linux kernel, and affected systems should be updated to the patched versions (Kernel Patch).