CVE-2024-27007

CVE-2024-27007

High · published May 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE

Commit d7a08838ab74 ("mm: userfaultfd: fix unexpected change to src_folio

when UFFDIO_MOVE fails") moved the src_folio->{mapping, index} changing to

after clearing the page-table and ensuring that it's not pinned. This

avoids failure of swapout+migration and possibly memory corruption.

However, the commit missed fixing it in the huge-page case.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Published
2024-05-01T10:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.8.86.8.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
https://git.kernel.org/stable/c/c0205eaf3af9f5db14d4b5ee4abacf4a583c3c50 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/df5f6e683e7f21a15d8be6e7a0c7a46436963ebe · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c0205eaf3af9f5db14d4b5ee4abacf4a583c3c50 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/df5f6e683e7f21a15d8be6e7a0c7a46436963ebe · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 01 MAY 05:29Z
    userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
    cvelistv5