CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails
In the Linux kernel, the following vulnerability has been resolved:
iouring: Fix release of pinned pages when iouaddrmap fails
Looking at the error path of iouaddrmap, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages.
I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
iouring: Fix release of pinned pages when iouaddrmap fails
The Linux kernel CVE team has assigned CVE-2024-35831 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35831-abcc@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35831?
CVE-2024-35831 has a moderate severity level due to its impact on the Linux kernel's I/O handling.
How do I fix CVE-2024-35831?
To fix CVE-2024-35831, upgrade to kernel version 6.6.23, 6.7.11, 6.8.2, 6.9, or the specified patched versions from Debian.
What systems are affected by CVE-2024-35831?
CVE-2024-35831 affects various versions of the Linux kernel, specifically those from Red Hat and Debian.
What is the nature of the vulnerability in CVE-2024-35831?
CVE-2024-35831 involves improper release of pinned pages in the io_uring subsystem of the Linux kernel.
Is there a workaround for CVE-2024-35831?
There are no specific workarounds for CVE-2024-35831; applying the patches is the recommended approach.