In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
There is a recent report on UFFDIO_COPY over hugetlb:
https://lore.kernel.org/all/[email protected]/
350: lockdep_assert_held(&hugetlb_lock);
Should be an issue in hugetlb but triggered in an userfault context, where it goes into the unlikely path where two threads modifying the resv map together. Mike has a fix in that path for resv uncharge but it looks like the locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd() will update the cgroup pointer, so it requires to be called with the lock held.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade rvUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-docUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-core | Aug 12, 2024 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-cross-headers | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms | Aug 14, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64k | Aug 9, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub