Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Leah Rumancik

#32584of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2024-4118
7.8
2024-04-16
Linux · Linux Kernel · CVE-2024-27022
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a race condition in the Linux kernel, specifically in the `fork` system call, where the `hugetlb dup vma private` and `hugetlb vm op open` functions are called outside the `i mmap rwsem` lock while the `vma` lock can be used at the same time. This can lead to a situation where the `vma lock` is cleared and then reassigned, potentially causing issues with memory management. The root cause of the problem is a race condition between the `fork` and `hugetlbfs fallocate` system calls. The `i mmap lock write(mapping)` function is used to lock the `i mmap` tree, and the `vma interval tree insert after` function is used to insert a new `vma` into the tree. However, the `hugetlb dup vma private` function is called outside the `i mmap rwsem` lock, which can lead to a situation where the `vma lock` is cleared and then reassigned. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.