CVE-2024-39477

High

Description

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not call vma_add_reservation upon ENOMEM sysbot reported a splat [1] on __unmap_hugepage_range(). This is because vma_needs_reservation() can return -ENOMEM if allocate_file_region_entries() fails to allocate the file_region struct for the reservation. Check for that and do not call vma_add_reservation() if that is the case, otherwise region_abort() and region_del() will see that we do not have any file_regions. If we detect that vma_needs_reservation() returned -ENOMEM, we clear the hugetlb_restore_reserve flag as if this reservation was still consumed, so free_huge_folio() will not increment the resv count. [1] https://lore.kernel.org/linux-mm/[email protected]/T/#ma5983bc1ab18a54910da83416b3f89f3c7ee43aa

SeverityHigh
CVSS7.8
Exploit probability9. percentile0.2%
ProductLinux Kernel
PublishedJul 5, 2024
First seenJul 5, 2024

How to fix

Update
  • linux linux_kernel6.9.5 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.9 ≤ v < 6.9.5, 6.10.06.9.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-39477 · Linux Kernel · Dark Radar