PT-2023-9438 · Linux+1 · Linux Kernel+1
Denys Vlasenko
·
Publicado
2023-01-05
·
Atualizado
2024-09-24
·
CVE-2022-48897
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc3+
Description
The issue is related to the arm64/mm component of the Linux kernel, where incorrect handling of memory allocation errors can lead to a denial of service. On arm64, the pmd leaf() function will return true even if the pmd is invalid due to the pmd present invalid() check. This can cause the file map count to decrease and then increase again, triggering a BUG ON() unexpectedly. The problem can be fixed by adding a !pmd present invalid() check in the pmd user accessible page() function.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the arm64/mm component, specifically the patch that adds the !pmd present invalid() check in the pmd user accessible page() function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Os