Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hyeongtak Ji

#46014of 53,635
5.5Total CVSS
Vulnerabilities · 1
PT-2024-9838
5.5
2024-02-16
Linux · Linux Kernel · CVE-2024-26783
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.0 Description: The issue is related to a bug in the Linux kernel's memory management subsystem, specifically in the `wakeup kswapd()` function. When a NUMA system is running with a node that doesn't have local memory, and thus no managed zones, an "oops" has been observed due to `wakeup kswapd()` being called with a wrong zone index, -1. This is fixed by checking the index before calling `wakeup kswapd()`. The vulnerability can cause a page fault and potentially lead to a denial-of-service. Recommendations: To resolve the issue, update the Linux kernel to a version that includes the fix for the `wakeup kswapd()` bug, which is version 6.6.0 or later. If updating is not possible, consider applying the patch manually or using a workaround provided by the Linux kernel community. As a temporary workaround, consider disabling the `wakeup kswapd()` function until a patch is available.