CVE-2024-44943 mm: gup: stop abusing try_grab_folio

🗓️ 28 Aug 2024 07:11:49Reported by GoogleType

osv🔗 osv.dev👁 12 Views

In the Linux kernel, a vulnerability (CVE-2024-44943) has been resolved related to a warning triggered during the pinning of folio in CMA memory when launching an SEV virtual machine. This was due to the abuse of try_grab_folio, leading to performance issues and an unclear use case. The issue has been fixed by redefining try_grab_folio() to try_grab_folio_fast() and try_grab_page() to try_grab_folio(), ensuring proper usage and preventing future abuse

Reporter	Title	Published	Views	Family All 43
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the mm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.	24 Feb 202500:00	–	bdu_fstec
Circl	CVE-2024-44943	28 Aug 202410:57	–	circl
CNNVD	Linux kernel 安全漏洞	28 Aug 202400:00	–	cnnvd
CVE	CVE-2024-44943	28 Aug 202407:11	–	cve
Cvelist	CVE-2024-44943 mm: gup: stop abusing try_grab_folio	28 Aug 202407:11	–	cvelist
Debian CVE	CVE-2024-44943	28 Aug 202407:11	–	debiancve
Hewlett-Packard	HP ThinPro 8.1 SP7 Security Updates	3 Jun 202500:00	–	hp
Mageia	Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities	19 Sep 202418:04	–	mageia
Mageia	Updated kernel-linus packages fix security vulnerabilities	19 Sep 202418:04	–	mageia

Source	Link
git	www.git.kernel.org/stable/c/26273f5f4cf68b29414e403837093408a9c98e1f
git	www.git.kernel.org/stable/c/f442fa6141379a20b48ae3efabee827a3d260787
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44943.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-44943
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

16 Apr 2026 04:44Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

EPSS0.00031

SSVC