In the Linux kernel, the following vulnerability has been resolved:
nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert
After commit 5b78ed24e8ec ("mm/pagemap: add mmap_assert_locked() annotations to find_vma*()"), the call to get_user_pages() will trigger the mmap assert.
static inline void mmap_assert_locked(struct mm_struct *mm) { lockdep_assert_held(&mm->mmap_lock); VM_BUG_ON_MM(!rwsem_is_locked(&mm->mmap_lock), mm); }
[ 62.521410] kernel BUG at include/linux/mmap_lock.h:156! ........................................................... [ 62.538938] RIP: 0010:find_vma+0x32/0x80 ........................................................... [ 62.605889] Call Trace: [ 62.608502] <TASK> [ 62.610956] ? lock_timer_base+0x61/0x80 [ 62.614106] find_extend_vma+0x19/0x80 [ 62.617195] __get_user_pages+0x9b/0x6a0 [ 62.620356] __gup_longterm_locked+0x42d/0x450 [ 62.623721] ? finish_wait+0x41/0x80 [ 62.626748] ? __kmalloc+0x178/0x2f0 [ 62.629768] ne_set_user_memory_region_ioctl.isra.0+0x225/0x6a0 [nitro_enclaves] [ 62.635776] ne_enclave_ioctl+0x1cf/0x6d7 [nitro_enclaves] [ 62.639541] __x64_sys_ioctl+0x82/0xb0 [ 62.642620] do_syscall_64+0x3b/0x90 [ 62.645642] entry_SYSCALL_64_after_hwframe+0x44/0xae
Use get_user_pages_unlocked() when setting the enclave memory regions. That's a similar pattern as mmap_read_lock() used together with get_user_pages().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-devel | Aug 9, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub