Linux · Linux Kernel · CVE-2024-26783
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.0
Description:
The issue is related to a bug in the Linux kernel's memory management subsystem, specifically in the `wakeup kswapd()` function. When a NUMA system is running with a node that doesn't have local memory, and thus no managed zones, an "oops" has been observed due to `wakeup kswapd()` being called with a wrong zone index, -1. This is fixed by checking the index before calling `wakeup kswapd()`. The vulnerability can cause a page fault and potentially lead to a denial-of-service.
Recommendations:
To resolve the issue, update the Linux kernel to a version that includes the fix for the `wakeup kswapd()` bug, which is version 6.6.0 or later. If updating is not possible, consider applying the patch manually or using a workaround provided by the Linux kernel community. As a temporary workaround, consider disabling the `wakeup kswapd()` function until a patch is available.