PT-2024-7330 · Linux+2 · Linux Kernel+2
Hugh Dickins
·
Published
2024-07-06
·
Updated
2024-12-12
·
CVE-2024-42234
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.7
Description:
The issue is related to a vulnerability in the
folio migrate mapping() function in the Linux kernel's memory management subsystem. This vulnerability is associated with double-free errors caused by deferred split and large folio migration. The problem arises when deferred split scan() moves folios to its local list without proper locking, allowing for a race condition that can lead to crashes or other symptoms implying double-free errors. The vulnerability can be exploited to cause a denial of service.Recommendations:
To resolve the issue, update the Linux kernel to version 6.7 or later, which includes the fix for the vulnerability. Specifically, the commit 9bcef5973e31 ("mm: memcg: fix split queue list crash when large folio migration") addresses the memcg-dependent locking issue, and additional fixes ensure that
folio migrate mapping() can avoid the race condition by using folio undo large rmappable() while the old folio's reference count is temporarily frozen.Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu