Vulnerability in Kernel: mm, thp: bail out early in collapse_file for writeback page
Summary
UVI-2021-1002060: mm, thp: bail out early in collapse_file for writeback page. Affects Kernel versions >= 99cb0dbd47a15d395bf3faa78dc122bc5efe3fc0, < 69a7fa5cb0de06c8956b040f19a7248c8c8308ca. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It is responsible for memory management, process scheduling, device drivers, and other essential functions. The vulnerability in question affects the mm (memory management) subsystem and specifically the transparent huge pages (thp) feature. Transparent huge pages allow for more efficient memory allocation by grouping multiple smaller pages into larger ones. However, a flaw in the collapse_file function can lead to issues when writing back pages. This vulnerability was introduced in version 5.4 of the Linux Kernel and has been fixed in version 5.10.77.
Vulnerability Detail
The vulnerability arises from a problem in the collapse_file function within the mm subsystem of the Kernel. When attempting to collapse transparent huge pages for writeback, the function fails to handle certain scenarios correctly, potentially leading to memory corruption or other unexpected behavior. An attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive information, escalate privileges, or cause a denial of service. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the vulnerability in the Kernel's mm subsystem related to the collapse_file function poses potential risks to system security and stability. It is crucial to update the Linux Kernel to version 5.10.77 or later to mitigate this vulnerability. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could range from memory corruption to unauthorized access, privilege escalation, or denial of service. However, the actual impact and attack plausibility have not been proven.
This vulnerability was introduced in version 5.4 of the Linux Kernel. Versions prior to 5.10.77 are considered vulnerable.
Yes, this vulnerability has been fixed in version 5.10.77 of the Linux Kernel.
At the time of this report, no known exploits for this vulnerability have been disclosed.
For more information about this vulnerability, you can refer to the provided references link or consult the official documentation and support channels of your Linux distribution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
