Vulnerability in Linux Kernel Affecting IBM Power11 Systems

CVE-2024-56765

Summary

This vulnerability in the Linux kernel arises from an improper handling of virtual memory areas (VMAs) in the VAS window struct. The issue occurs during migration, where the VMA address is not updated appropriately when munmap() is called. As a result, an invalid access to freed memory can take place, leading to potential system instability or crashes. The KASAN reports highlight that improper memory access can arise, representing a serious concern for users operating IBM Power11 systems relying on the Linux kernel.

References