In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].
This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.
[[email protected]: fix vm_file check [3]]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extra | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftool | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-core | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub