PT-2024-9777 · Linux+7 · Linux Kernel+7
Published
2024-05-16
·
Updated
2025-09-29
·
CVE-2024-40914
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.9.0-rc4-00491-gd5ce28f156fe-dirty #14
Description:
The vulnerability is related to the handling of huge zero folio in the Linux kernel's mm/huge memory module. When the HWPoison flag is set for huge zero folio without increasing the folio refcnt, the unpoison memory() function will decrease the folio refcnt unexpectedly, leading to a VM BUG ON PAGE error when releasing huge zero folio. This issue can cause a kernel panic.
Recommendations:
To resolve this issue, skip unpoisoning huge zero folio in unpoison memory() by modifying the Linux kernel code to exclude huge zero folio from the unpoisoning process. This change will prevent the unexpected decrease of the folio refcnt and the resulting kernel panic.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu