In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].
This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.
[[email protected]: fix vm_file check [3]]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-debug-develUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-rt-debug-core | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade dtb-freescale | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub