In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
There is a recent report on UFFDIO_COPY over hugetlb:
https://lore.kernel.org/all/[email protected]/
350: lockdep_assert_held(&hugetlb_lock);
Should be an issue in hugetlb but triggered in an userfault context, where it goes into the unlikely path where two threads modifying the resv map together. Mike has a fix in that path for resv uncharge but it looks like the locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd() will update the cgroup pointer, so it requires to be called with the lock held.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade rtlaUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extra | Aug 12, 2024 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade perfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfo | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-qcomUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug | Aug 14, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpae | Aug 9, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub