Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38543
HistoryJun 19, 2024 - 1:35 p.m.

CVE-2024-38543 lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

2024-06-1913:35:17
Linux
github.com
1
linux kernel vulnerability
null pointer dereference
kcalloc
evict chunk
physically contiguous memory
kvcalloc
allocation failure

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

The kcalloc() in dmirror_device_evict_chunk() will return null if the
physical memory has run out. As a result, if src_pfns or dst_pfns is
dereferenced, the null pointer dereference bug will happen.

Moreover, the device is going away. If the kcalloc() fails, the pages
mapping a chunk could not be evicted. So add a __GFP_NOFAIL flag in
kcalloc().

Finally, as there is no need to have physically contiguous memory, Switch
kcalloc() to kvcalloc() in order to avoid failing allocations.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial