Kernel Vulnerability in Linux Package: Misuse of Mapping Large Folio Support
Summary
DEBIAN-CVE-2024-40950: In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: fix misused mapping_large_folio_support() for anon folios When I did a large folios split test, a WARNING "[ 5059.122759][ T166] Cannot... Affects linux versions < 6.9.7-1. Fixed in 6.9.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Debian operating system, providing essential services for hardware management, process scheduling, and memory management. It supports a wide range of hardware architectures and is known for its stability and performance. However, vulnerabilities can arise, affecting system security and functionality. This specific vulnerability relates to the handling of large folios in memory management, which can lead to improper memory operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of large folios, specifically in the mapping_large_folio_support() function. This function was misused for anonymous folios, which are not intended for this operation. When a large folio split test was conducted, it triggered a warning indicating that a file folio could not be split to a non-zero order. This mismanagement can lead to failed splits of anonymous transparent huge pages (THP), potentially causing system instability and performance issues. The vulnerability arises from a missing check for anonymous folios, which could allow for improper memory management and exploitation.
How To Fix
Minimum fixed version
6.9.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to monitor their systems for any unusual behavior and apply the patch as soon as it becomes available.
Conclusion
The vulnerability in the Linux kernel regarding the misuse of mapping large folio support poses significant risks to system stability and performance. It is crucial for users to update their systems to the patched version to mitigate these risks. Regular monitoring and prompt updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves the misuse of the mapping_large_folio_support() function in the Linux kernel, affecting the handling of large folios.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could lead to system instability, improper memory management, and performance degradation.
Yes, a patch is available in version 6.9.7-1 of the Linux package. Users should update to this version or later.
While there are no specific workarounds, it is advisable to monitor your system for any unusual behavior until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
