In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
There is a recent report on UFFDIO_COPY over hugetlb:
https://lore.kernel.org/all/[email protected]/
350: lockdep_assert_held(&hugetlb_lock);
Should be an issue in hugetlb but triggered in an userfault context, where it goes into the unlikely path where two threads modifying the resv map together. Mike has a fix in that path for resv uncharge but it looks like the locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd() will update the cgroup pointer, so it requires to be called with the lock held.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade libperfUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfo | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade libperfUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-rt | Aug 14, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspi | Aug 9, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub