PT-2024-36985 · Linux+6 · Linux Kernel+6
Sachin P Bappalige
·
Published
2024-12-28
·
Updated
2026-05-26
·
CVE-2024-56677
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises during early initialization in the Linux kernel, specifically in the powerpc/fadump module. The problem occurs because CMA MIN ALIGNMENT BYTES can be PAGE SIZE during early init, as pageblock order is still zero and gets initialized later. This causes the CMA memory alignment check to be bypassed in cma init reserved mem(), potentially leading to a VM BUG ON PAGE error when cma activate area() is called if the reserved memory area is not pageblock order aligned. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations
To resolve the issue, move the fadump cma init() function to setup arch() after initmem init(), where other CMA reservations are also called. This ensures that the CMA memory alignment check is properly performed, preventing potential errors.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use of Uninitialized Resource
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu