CVE-2024-53687

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue is related to the usage of IPIs in the kfence protect page() function, which can trigger a warning when the irqs are disabled. The flush tlb kernel range() function may use IPIs to flush the TLBs of all cores, leading to potential inaccuracies when using kfence. The vulnerability has been resolved by fixing the IPIs usage in kfence protect page().

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the kfence protect page() function until a patch is available. Restrict access to the vulnerable flush tlb kernel range() function to minimize the risk of exploitation. Avoid using the kfence feature in the affected kernel versions until the issue is resolved.