CVE-2024-27007: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: change srcfolio after ensuring it's unpinned in UFFDIOMOVE
Commit d7a08838ab74 ("mm: userfaultfd: fix unexpected change to srcfolio when UFFDIOMOVE fails") moved the srcfolio->{mapping, index} changing to after clearing the page-table and ensuring that it's not pinned. This avoids failure of swapout+migration and possibly memory corruption.
However, the commit missed fixing it in the huge-page case.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27007?
CVE-2024-27007 has a medium severity rating due to potential implications for memory management in the Linux kernel.
How do I fix CVE-2024-27007?
To fix CVE-2024-27007, update the Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What software is affected by CVE-2024-27007?
CVE-2024-27007 affects specific versions of the Linux kernel distributed by Debian.
What kind of vulnerability is CVE-2024-27007?
CVE-2024-27007 is a vulnerability related to userfaultfd handling and memory state management in the Linux kernel.
When was CVE-2024-27007 announced?
CVE-2024-27007 was announced as part of a security update in 2024.