Critical Vulnerability in Linux Kernel: PTE Marker Handling in hugetlb_change_protection
Summary
CVE-2022-49760: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() Patch series "mm/hugetlb: uffd-wp fixes for hugetlb_change_protection()". Affects linux versions < 6.1.8-1. Fixed in 6.1.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services to applications and facilitates communication between hardware and software. This vulnerability affects the hugetlb (huge pages) memory management subsystem, which is designed to optimize memory usage for large data sets. The issue arises from improper handling of page table entries (PTE) markers, leading to potential system instability and crashes.
Vulnerability Detail
In the Linux kernel, specifically within the hugetlb memory management subsystem, a vulnerability has been identified that improperly handles PTE markers during the hugetlb_change_protection function. This can occur when using userfaultfd (uffd-wp) with huge pages in virtual memory management. The vulnerability can lead to a VM_BUG_ON() condition, causing the kernel to crash. The root cause is the incorrect protection and unprotection of uffd-wp PTE markers, which can result in stale PTE variables and mismanagement of memory pages. This vulnerability can be triggered by specific operations such as mapping a memfd backed by huge pages and performing uffd-wp operations.
How To Fix
Minimum fixed version
6.1.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
The CVE-2022-49760 vulnerability in the Linux kernel poses a significant risk due to improper handling of PTE markers in the hugetlb subsystem. Users are encouraged to update their systems to the latest patched version to mitigate potential risks and ensure system stability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49760 is a vulnerability in the Linux kernel that affects the handling of PTE markers in the hugetlb memory management subsystem.
The vulnerability affects Linux kernel versions prior to 6.1.8-1 on Debian-based systems.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to system crashes, instability, and potential data loss due to improper memory management.
Yes, a patch is available in version 6.1.8-1 of the Linux package. It is recommended to update your system to this version or later.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
