Vulnerability in Linux Kernel: mm/pages_alloc.c
Summary
GSD-2022-1002274: mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node. Affects Kernel versions >= 2a1e274acf0b1c192face19a4be7c12d4503eaaf, < 2efe956a74dc9c214237e3d470ca598a1e0fa8af. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware. The mm/pages_alloc.c file is part of the memory management subsystem in the kernel. It is responsible for allocating and managing memory pages for various purposes. This vulnerability specifically affects the ZONE_MOVABLE feature in the memory management subsystem.
Vulnerability Detail
The vulnerability in mm/pages_alloc.c allows the creation of ZONE_MOVABLE beyond the end of a node. This can lead to memory corruption and potentially be exploited by an attacker. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability was fixed in Linux Kernel version v5.4.189 by commit 2efe956a74dc9c214237e3d470ca598a1e0fa8af. However, it was introduced in version v2.6.23 by commit 2a1e274acf0b1c192face19a4be7c12d4503eaaf.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in mm/pages_alloc.c of the Linux Kernel can potentially lead to memory corruption and unauthorized access. It is crucial to update the kernel to the fixed version v5.4.189 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware.
mm/pages_alloc.c is a file in the Linux Kernel's memory management subsystem. It handles the allocation and management of memory pages for various purposes.
ZONE_MOVABLE is a feature in the Linux Kernel's memory management subsystem that allows memory pages to be moved dynamically during runtime. This feature is useful for certain use cases, such as hotplug memory.
The exact impact and attack vectors of this vulnerability have not been proven yet. However, if successfully exploited, it could lead to memory corruption and potentially allow an attacker to gain unauthorized access or execute arbitrary code.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.189 or later. This can be done by fetching the latest version from the official Linux Kernel repository and following the installation instructions provided.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
