mm: invalidate hwpoison page cache page in fault path - Kernel
Summary
GSD-2022-1002272: mm: invalidate hwpoison page cache page in fault path. Affects Kernel versions < d1313f5e8fe50ce84ec3eac162873ee028a30631. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is the core component of the Linux operating system. It provides essential services and functions, including managing system resources, handling hardware devices, and facilitating communication between software and hardware. The Kernel is responsible for memory management, process scheduling, and file system operations, among other critical tasks. This vulnerability affects the Kernel's handling of hwpoison page cache pages in the fault path.
Vulnerability Detail
The vulnerability in the Kernel's fault path arises from the failure to invalidate hwpoison page cache pages. This can lead to potential security risks, although the actual impact and attack plausibility have not been proven. The vulnerability has been fixed in Linux Kernel version v5.4.189 by commit d1313f5e8fe50ce84ec3eac162873ee028a30631. It is crucial to update to this version or a later one to mitigate the vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the Kernel is vulnerable to a fault path issue related to the handling of hwpoison page cache pages. To mitigate this vulnerability, it is crucial to update the Kernel to version v5.4.189 or a newer release. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, it is advisable to update the Kernel to the fixed version to mitigate any potential security risks.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time and provide alerts for any open-source vulnerabilities, including this one.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel to the fixed version as soon as possible.
You can find more information about the fix for this vulnerability in the Linux Kernel source code repository. The commit d1313f5e8fe50ce84ec3eac162873ee028a30631 addresses this issue.
The discovery of this vulnerability was automated and intended to aid in the discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
