PT-2024-36985

CVE-2024-56677

·

Published

2024-12-28

·

Updated

2026-10-09

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises during early initialization in the Linux kernel, specifically in the powerpc/fadump module. The problem occurs because CMA MIN ALIGNMENT BYTES can be PAGE SIZE during early init, as pageblock order is still zero and gets initialized later. This causes the CMA memory alignment check to be bypassed in cma init reserved mem(), potentially leading to a VM BUG ON PAGE error when cma activate area() is called if the reserved memory area is not pageblock order aligned. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations To resolve the issue, move the fadump cma init() function to setup arch() after initmem init(), where other CMA reservations are also called. This ensures that the CMA memory alignment check is properly performed, preventing potential errors. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
DLA-4076-1
OESA-2025-1093
OESA-2025-1097
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0557-1
SUSE-SU-2025:0289-1
SUSE-SU-2025:0428-1
SUSE-SU-2025_0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025_0499-1
SUSE-SU-2025:0557-1
SUSE-SU-2025_0557-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
USN-7276-1
USN-7277-1
USN-7310-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1
Found an issue in the description? Have something to add? Feel free to write us 👾