Fix for Loss of Young/Dirty Bits During Pagemap Scan
CVE-2024-36943

7.3HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
30 May 2024

What is CVE-2024-36943?

A memory management vulnerability in the Linux kernel affects the handling of page table entries (PTEs) during pagemap scans. The issue arises when multiple threads access or modify the same PTE, leading to potential loss of young and dirty bits, which are crucial for tracking memory state. The implementation of make_uffd_wp_pte() did not adequately protect against concurrent modifications, risking system stability and data integrity. Recent patches have addressed this by ensuring atomic operations during PTE updates, thereby preventing race conditions and ensuring accurate memory state representation.

Affected Version(s)

Linux 52526ca7fdb905a768a93f8faa418e9b988fc34b < 74b3d66f91d9f539f99faad74d796fa9a389a015

Linux 52526ca7fdb905a768a93f8faa418e9b988fc34b

Linux 6.7

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.