PT-2024-8505 · Linux+9 · Linux Kernel+9
Wupeng Ma
·
Published
2024-04-05
·
Updated
2025-09-29
·
CVE-2024-35877
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.7.5-100.fc38.x86 64
Description
The vulnerability is related to the handling of VM PAT in COW mappings. PAT handling won't do the right thing in COW mappings, where the first PTE can be replaced during write faults to point at anon folios. This can lead to memory leaks or incorrect memory freeing. The issue is triggered when using the
follow phys() function, which may return the address and protection of the anon folio or fail on swap/nonswap entries. To fix this, the follow phys() function has been updated to refuse returning anon folios and fallback to using the stored PFN inside vma->vm pgoff for COW mappings.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the VM PAT handling in COW mappings, such as version 6.7.5-100.fc38.x86 64 or later.
Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version.
Exploit
Fix
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu