The vulnerability of the hugetlb_fault() function in the Linux kernel’s memory management subsystem allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hugetlbfault function in the mm/hugetlb.c module of the Linux kernel’s memory management subsystem is related to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-47676

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlbfault. This happens because vmfanonprepare could drop the per-VMA lock and allow the current VMA to be freed before hugetlbvmaunlockread is...