PT-2024-33805 · Linux+2 · Linux Kernel+2
Steve Sistare
·
Published
2024-09-03
·
Updated
2025-02-28
·
CVE-2024-49964
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A memory leak issue has been identified in the Linux kernel, specifically in the
mm/hugetlb component. The problem occurs when memfd pin folios is followed by unpin folios, and the pages were not already faulted in. This is because the folio refcount for pages created by memfd alloc folio never goes to 0. The issue is caused by a missing folio put to undo the folio try get in memfd pin folios. The refcount for an unfaulted page is incorrectly set to 513 instead of 512 after memfd pin folios and unpin folios.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu