In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].
This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.
[[email protected]: fix vm_file check [3]]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-rt-devel | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-headers | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-defaultUpgrade kselftests-kmp-rt | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub