CVE-2024-46838
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: don't BUG_ON() if khugepaged yanks our page table Since khugepaged was changed to allow retracting page tables in file mappings without holding the mmap lock, these BUG_ON()s are wrong - get rid of them. We could also remove the preceding "if (unlikely(...))" block, but then we could reach pte_offset_map_lock() with transhuge pages not just for file mappings but also for anonymous mappings - which would probably be fine but I think is not necessarily expected.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedSep 27, 2024
First seenSep 27, 2024
How to fix
Update
- linux linux_kernel6.6.51, 6.10.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.6 ≤ v < 6.6.51, 6.7 ≤ v < 6.10.10, 6.11 | 6.6.51, 6.10.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.