PT-2024-33805

CVE-2024-49964

·

تاريخ النشر

2024-09-03

·

تاريخ التحديث

2025-02-28

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A memory leak issue has been identified in the Linux kernel, specifically in the mm/hugetlb component. The problem occurs when memfd pin folios is followed by unpin folios, and the pages were not already faulted in. This is because the folio refcount for pages created by memfd alloc folio never goes to 0. The issue is caused by a missing folio put to undo the folio try get in memfd pin folios. The refcount for an unfaulted page is incorrectly set to 513 instead of 512 after memfd pin folios and unpin folios.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾