CVE-2024-36000 mm/hugetlb: fix missing hugetlb_lock for resv uncharge

🗓️ 20 May 2024 09:48:02Reported by GoogleType

osv🔗 osv.dev👁 31 Views

In Linux kernel, the recent vulnerability CVE-2024-36000 has been resolved addressing the missing hugetlb_lock for hugetlb uncharge

Reporter	Title	Published	Views	Family All 187
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	10 Feb 202520:42	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Storage Scale System that are now included	22 Oct 202420:24	–	ibm
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-643)	24 Jun 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2024:5101)	9 Aug 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2024:5102)	9 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2024-2178)	21 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2024-2205)	21 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-2206)	21 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-2207)	21 Aug 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2519)	9 Oct 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/4c806333efea1000a2a9620926f560ad2e1ca7cc
git	www.git.kernel.org/stable/c/538faabf31e9c53d8c870d114846fda958a0de10
git	www.git.kernel.org/stable/c/b76b46902c2d0395488c8412e1116c2486cdfcb2
git	www.git.kernel.org/stable/c/f6c5d21db16a0910152ec8aa9d5a7aed72694505
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36000.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-36000
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

16 Apr 2026 04:35Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

EPSS0.00008

SSVC