In the Linux kernel, the following vulnerability has been resolved:
mm/gup: fix gup_pud_range() for dax
For dax pud, pud_huge() returns true on x86. So the function works as long as hugetlb is configured. However, dax doesn't depend on hugetlb. Commit 414fd080d125 ("mm/gup: fix gup_pmd_range() for dax") fixed devmap-backed huge PMDs, but missed devmap-backed huge PUDs. Fix this as well.
This fixes the below kernel panic:
general protection fault, probably for non-canonical address 0x69e7c000cc478: 0000 [#1] SMP < snip > Call Trace: <TASK> get_user_pages_fast+0x1f/0x40 iov_iter_get_pages+0xc6/0x3b0 ? mempool_alloc+0x5d/0x170 bio_iov_iter_get_pages+0x82/0x4e0 ? bvec_alloc+0x91/0xc0 ? bio_alloc_bioset+0x19a/0x2a0 blkdev_direct_IO+0x282/0x480 ? __io_complete_rw_common+0xc0/0xc0 ? filemap_range_has_page+0x82/0xc0 generic_file_direct_write+0x9d/0x1a0 ? inode_update_time+0x24/0x30 __generic_file_write_iter+0xbd/0x1e0 blkdev_write_iter+0xb4/0x150 ? io_import_iovec+0x8d/0x340 io_write+0xf9/0x300 io_issue_sqe+0x3c3/0x1d30 ? sysvec_reschedule_ipi+0x6c/0x80 __io_queue_sqe+0x33/0x240 ? fget+0x76/0xa0 io_submit_sqes+0xe6a/0x18d0 ? __fget_light+0xd1/0x100 __x64_sys_io_uring_enter+0x199/0x880 ? __context_tracking_enter+0x1f/0x70 ? irqentry_exit_to_user_mode+0x24/0x30 ? irqentry_exit+0x1d/0x30 ? __context_tracking_exit+0xe/0x70 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fc97c11a7be < snip > </TASK> ---[ end trace 48b2e0e67debcaeb ]--- RIP: 0010:internal_get_user_pages_fast+0x340/0x990 < snip > Kernel panic - not syncing: Fatal exception Kernel Offset: disabled
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.86-53.137Upgrade python-perf-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1170-kvmUpgrade linux-image-4.15.0-1143-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1196-azureUpgrade linux-image-oemUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-aws-hweUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-4.15Upgrade linux-image-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1188-awsUpgrade linux-image-4.15.0-2105-azure-fipsUpgrade linux-image-4.15.0-2089-gcp-fipsUpgrade linux-image-4.15.0-1150-oracleUpgrade linux-image-4.15.0-246-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-2126-aws-fipsUpgrade linux-image-4.15.0-246-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-edgeUpgrade linux-image-oracleUpgrade linux-image-aws-fips-4.15Upgrade linux-image-virtualUpgrade linux-image-oracle-4.15Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1181-gcpUpgrade linux-image-azure-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-fips-4.15 | Nov 19, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub