In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
There is a recent report on UFFDIO_COPY over hugetlb:
https://lore.kernel.org/all/[email protected]/
350: lockdep_assert_held(&hugetlb_lock);
Should be an issue in hugetlb but triggered in an userfault context, where it goes into the unlikely path where two threads modifying the resv map together. Mike has a fix in that path for resv uncharge but it looks like the locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd() will update the cgroup pointer, so it requires to be called with the lock held.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-tools-libsUpgrade bpftoolUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extra | Aug 12, 2024 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfo | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfo | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extra | Aug 14, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-64k-6.8 | Aug 9, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub