In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].
This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.
[[email protected]: fix vm_file check [3]]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-cross-headers | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvm | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-rockchip | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub