PT-2024-35543 · Linux+5 · Linux Kernel+5
Published
2024-11-05
·
Updated
2026-05-26
·
CVE-2024-53079
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.65
Description
The issue concerns a problem with the Linux kernel's memory management, specifically with the handling of Transparent Huge Pages (THP) deferred split queues. Recent changes in the kernel have increased pressure on these queues, revealing long-standing races and causing list corruption, "Bad page state" errors, and other issues. The problem arises from the lack of proper locking and unqueueing of THP folios from the deferred split list, particularly during swapout and memcg (memory control group) operations. This can lead to corruption of the memcg's list and other safety issues. The estimated number of potentially affected devices is not specified, and there is no information about real-world incidents where this issue was exploited.
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.65 or later. As a temporary workaround, consider disabling the
folio unqueue deferred split() function until a patch is available. Restrict access to the vulnerable mem cgroup swapout() and mem cgroup move account() functions to minimize the risk of exploitation. Avoid using the folio->memcg data variable in the affected code paths until the issue is resolved.Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu