PT-2025-3606
CVE-2024-57881
·
Published
2024-12-18
·
Updated
2025-09-29
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises in the
split large buddy() function where pfn to page() might be called on a possibly non-existent PFN. In specific corner cases, such as freeing the highest pageblock in the last memory section with CONFIG SPARSEMEM and !CONFIG SPARSEMEM EXTREME, this could lead to pfn to section() returning NULL and section mem map addr() dereferencing that NULL pointer. The problem was identified through code inspection.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾