GB Page Mapping Vulnerability in Linux Kernel: CVE-2024-50017
Summary
CVE-2024-50017: In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, managing hardware resources and providing essential services for software applications. It supports a wide range of functionalities, including process management, memory management, and device control. This vulnerability specifically affects the memory mapping mechanism, where improper handling of GB pages can lead to unintended access to reserved memory regions.
Vulnerability Detail
CVE-2024-50017 arises from the use of GB pages in the Linux kernel's ident_pud_init() function, which creates identity maps. When only a portion of a GB page is requested, the entire GB page can be mapped, potentially including reserved memory areas. This can lead to processor speculation into these regions, causing system instability and halts, particularly on UV systems. The vulnerability stems from the kernel's failure to coalesce mapping requests, resulting in inefficient memory usage and security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
CVE-2024-50017 is a significant vulnerability in the Linux kernel that can lead to serious system instability due to improper memory mapping. Users are encouraged to update their systems promptly to the patched versions to safeguard against potential exploits.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50017 is a vulnerability in the Linux kernel that involves improper mapping of GB pages, potentially leading to access to reserved memory regions.
This vulnerability can cause system halts and instability, especially on UV systems, due to processor speculation into reserved memory areas.
The vulnerability affects the Linux kernel across Debian 11, 12, and 13 distributions.
You can use Vulert, a tool that monitors open-source vulnerabilities, to check if your application is affected by CVE-2024-50017. Visit Vulert Scanner to use the Vulert playground without signup.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
