CVE-2024-49885

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-rc3-next-20240814-00004-g61844c55c3f4

Description: A vulnerability in the Linux kernel has been resolved, related to the mm and slub modules. The issue arises when the init on free option is enabled, causing the full object size, including the redzone, to be cleared. This leads to the check object function treating the entire object as a redzone, resulting in a BUG report. The vulnerability is addressed by using orig size to clear the used area and restoring the value of orig size after clearing the remaining area.

Recommendations: To resolve the issue, update to a version of the Linux kernel that includes the fix for this vulnerability. Specifically, for versions prior to 6.11.0-rc3-next-20240814-00004-g61844c55c3f4, apply the patch that addresses the mm and slub modules to avoid zeroing the kmalloc redzone. As a temporary workaround, consider disabling the init on free option until a patched version is available.