PT-2024-36848 · Linux+5 · Linux Kernel+5

Published

2024-09-20

·

Updated

2026-05-26

·

CVE-2024-56544

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved, related to memory allocation in udmabuf. When PAGE SIZE is 4096 and MAX PAGE ORDER is 10 on a 64-bit machine, page alloc only supports 4MB. If the size limit is changed to 3072 (3GB) and then 3GB is allocated, udmabuf creation will fail. The issue is due to kmalloc's maximum allocation size and fragmentation. The patch changes udmabuf's array to use kvmalloc array, which can guarantee allocation for any size without affecting kmalloc's performance.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-56237
AZL-56250
BDU:2025-15334
CVE-2024-56544
ECHO-3E90-7063-3B92
INFSA-2025_6966
RHSA-2025:6966
RHSA-2025_6966
USN-7276-1
USN-7277-1
USN-7310-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Ubuntu