Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-47745

21
FAUCET Score

CVE-2024-47745 is a vulnerability in the Linux kernel that allows a local attacker to bypass the W^X (Write XOR Execute) policy, specifically when enforced by SELinux. This occurs because the remap_file_pages syscall handler directly calls do_mmap() without the necessary security_mmap_file() LSM hook, enabling remapping of pages to RWX (Read-Write-Execute) if personality(READ_IMPLIES_EXEC) was previously set. With a CVSS score of 7.8 (HIGH), this vulnerability could lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
11.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
< 6.1.120CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.54CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.13CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.11, < 6.11.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.29%
Probability of exploitation in next 30 days
EPSS Percentile
20.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0029 is in the 57th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17603-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17610-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.56.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.117.1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.67.1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-570.12.1.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.117.1.rt14.402.el9_2
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (5)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
microsoft2024-Nov/CVE-2024-47745

CVE-2024-47745

Nov 12, 2024
redhatCVE-2024-47745Moderate

kernel: mm: call the security_mmap_file() LSM hook in remap_file_pages()

Oct 21, 2024
microsoft2024-Oct/CVE-2024-47745Important

mm: call the security_mmap_file() LSM hook in remap_file_pages()

Oct 8, 2024

References

git.kernel.org / stable/c/0f910dbf2f2a4a7820ba4bac7b280f7108aa05b1
Patch
git.kernel.org / stable/c/3393fddbfa947c8e1fdcc4509226905ffffd8b89
Patch
git.kernel.org / stable/c/49d3a4ad57c57227c3b0fd6cd4188b2a5ebd6178
Patch
git.kernel.org / stable/c/ce14f38d6ee9e88e37ec28427b4b93a7c33c70d3
Patch
git.kernel.org / stable/c/ea7e2d5e49c05e5db1922387b09ca74aa40f46e2
Patch
lists.debian.org / debian-lts-announce/2025/03/msg00001.html
Mailing ListThird Party Advisory