First published: Mon Oct 16 2023(Updated: )
extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | <6.4.12 | |
All of | ||
Netapp H300s Firmware | ||
Netapp H300s | ||
All of | ||
Netapp H500s Firmware | ||
Netapp H500s | ||
All of | ||
Netapp H700s Firmware | ||
Netapp H700s | ||
All of | ||
Netapp H410s Firmware | ||
Netapp H410s |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-40791 is a vulnerability in the Linux kernel before version 6.4.12 that can lead to pages not being unpinned in a specific situation.
CVE-2023-40791 has a severity rating of 9.1, which is considered critical.
Linux kernel versions before 6.4.12 are affected by CVE-2023-40791.
To fix CVE-2023-40791, update the Linux kernel to version 6.4.12 or later.
For more information about CVE-2023-40791, you can refer to the following links: [ChangeLog-6.4.12](https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12), [Commit Details](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f443fd5af5dbd531f880d3645d5dd36976cf087f), [Kernel Mailing List Discussion](https://lkml.org/lkml/2023/8/3/323).