In the Linux kernel, the following vulnerability has been resolved:
mm/userfaultfd: reset ptes when close() for wr-protected ones
Userfaultfd unregister includes a step to remove wr-protect bits from all the relevant pgtable entries, but that only covered an explicit UFFDIO_UNREGISTER ioctl, not a close() on the userfaultfd itself. Cover that too. This fixes a WARN trace.
The only user visible side effect is the user can observe leftover wr-protect bits even if the user close()ed on an userfaultfd when releasing the last reference of it. However hopefully that should be harmless, and nothing bad should happen even if so.
This change is now more important after the recent page-table-check patch we merged in mm-unstable (446dd9ad37d0 ("mm/page_table_check: support userfault wr-protect entries")), as we'll do sanity check on uffd-wp bits without vma context. So it's better if we can 100% guarantee no uffd-wp bit leftovers, to make sure each report will be valid.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-mediatekUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-marvell | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-ibm | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub