CVE-2023-52934

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the mm/MADV COLLAPSE feature. The issue arises from a logical hole introduced in a commit, where !none && !huge && !bad pmds are classified as genuine pte-table-mapping-pmds, potentially allowing swap entries to leak through. The problem occurs when the pmd values are not checked again before use in pte offset map lock(), which expects a genuine pte-table-mapping-pmd. The vulnerability could lead to incorrect reporting of success in madvise collapse() when the memory isn't pmd-backed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.