CVE-2024-39477

MEDIUM

Linux Kernel 6.9-6.9.4 - Denial of Service via Hugepage Reservation Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not call vma_add_reservation upon ENOMEM sysbot reported a splat [1] on __unmap_hugepage_range(). This is because vma_needs_reservation() can return -ENOMEM if allocate_file_region_entries() fails to allocate the file_region struct for the reservation. Check for that and do not call vma_add_reservation() if that is the case, otherwise region_abort() and region_del() will see that we do not have any file_regions. If we detect that vma_needs_reservation() returned -ENOMEM, we clear the hugetlb_restore_reserve flag as if this reservation was still consumed, so free_huge_folio() will not increment the resv count. [1] https://lore.kernel.org/linux-mm/[email protected]/T/#ma5983bc1ab18a54910da83416b3f89f3c7ee43aa

Scores

CVSS v3 5.5
EPSS 0.0018
EPSS Percentile 7.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (9)
linux/Kernel 6.9.0 - 6.9.5linux
Linux/Linux < 6.9
Linux/Linux 6.10
Linux/Linux 6.9
Linux/Linux 6.9.5 - 6.9.*
Linux/Linux df7a6d1f64056aec572162c5d35ed9ff86ece6f3 - 8daf9c702ee7f825f0de8600abff764acfedea13
Linux/Linux df7a6d1f64056aec572162c5d35ed9ff86ece6f3 - aa998f9dcb34c28448f86e8f5490f20d5eb0eac7
linux/linux_kernel 6.10.0 rc1 (2 CPE variants)
linux/linux_kernel 6.9 - 6.9.5
Published Jul 05, 2024
Tracked Since Feb 18, 2026