In the Linux kernel, the following vulnerability has been resolved:
mm/userfaultfd: reset ptes when close() for wr-protected ones
Userfaultfd unregister includes a step to remove wr-protect bits from all the relevant pgtable entries, but that only covered an explicit UFFDIO_UNREGISTER ioctl, not a close() on the userfaultfd itself. Cover that too. This fixes a WARN trace.
The only user visible side effect is the user can observe leftover wr-protect bits even if the user close()ed on an userfaultfd when releasing the last reference of it. However hopefully that should be harmless, and nothing bad should happen even if so.
This change is now more important after the recent page-table-check patch we merged in mm-unstable (446dd9ad37d0 ("mm/page_table_check: support userfault wr-protect entries")), as we'll do sanity check on uffd-wp bits without vma context. So it's better if we can 100% guarantee no uffd-wp bit leftovers, to make sure each report will be valid.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-syms | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub