CVE-2021-47491

mm: khugepaged: skip huge page collapse for special files

published May 22, 2024

CVSS
—
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm: khugepaged: skip huge page collapse for special files

The read-only THP for filesystems will collapse THP for files opened

readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB

misses for large text segments. But it doesn't restrict the file types

so a THP could be collapsed for a non-regular file, for example, block

device, if it is opened readonly and mapped with EXEC permission. This

may cause bugs, like [1] and [2].

This is definitely not the intended usecase, so just collapse THP for

regular files in order to close the attack surface.

[[email protected]: fix vm_file check [3]]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Published
2024-05-22T08:19Z
EPSS history
Timeline
  • 22 MAY 08:19Z
    mm: khugepaged: skip huge page collapse for special files
    cvelistv5