CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order()
In the Linux kernel, the following vulnerability has been resolved:
mm: use memallocnofssave() in pagecacheraorder()
See commit f2c817bed58d ("mm: use memallocnofssave in readahead path"), ensure that pagecacheraorder() do not attempt to reclaim file-backed pages too, or it leads to a deadlock, found issue when test ext4 large folio.
INFO: task DataXceiver for:7494 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hungtasktimeoutsecs" disables this message. task:DataXceiver for state:D stack:0 pid:7494 ppid:1 flags:0x00000200 Call trace: switchto+0x14c/0x240 schedule+0x82c/0xdd0 schedule+0x58/0xf0 ioschedule+0x24/0xa0 foliolock+0x130/0x300 migratepagesbatch+0x378/0x918 migratepages+0x350/0x700 compactzone+0x63c/0xb38 compactzoneorder+0xc0/0x118 trytocompactpages+0xb0/0x280 allocpagesdirectcompact+0x98/0x248 allocpages+0x510/0x1110 allocpages+0x9c/0x130 folioalloc+0x20/0x78 filemapallocfolio+0x8c/0x1b0 pagecacheraorder+0x174/0x308 ondemandreadahead+0x1c8/0x2b8 pagecacheasyncra+0x68/0xb8 filemapreadahead.isra.0+0x64/0xa8 filemapgetpages+0x3fc/0x5b0 filemapspliceread+0xf4/0x280 ext4filespliceread+0x2c/0x48 [ext4] vfsspliceread.part.0+0xa8/0x118 splicedirecttoactor+0xbc/0x288 dosplicedirect+0x9c/0x108 dosendfile+0x328/0x468 arm64syssendfile64+0x8c/0x148 invokesyscall+0x4c/0x118 el0svccommon.constprop.0+0xc8/0xf0 doel0svc+0x24/0x38 el0svc+0x4c/0x1f8 el0t64synchandler+0xc0/0xc8 el0t64sync+0x188/0x190
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mm: use memallocnofssave() in pagecacheraorder()
The Linux kernel CVE team has assigned CVE-2024-36882 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053032-CVE-2024-36882-79ff@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36882?
CVE-2024-36882 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-36882?
To fix CVE-2024-36882, update your Linux kernel to version 6.1.91, 6.6.31, 6.8.10, or 6.9, or apply the specified Debian patches.
What software is affected by CVE-2024-36882?
CVE-2024-36882 affects multiple versions of the Linux kernel including versions prior to 6.1.91, 6.6.31, 6.8.10, and 6.9.
Is CVE-2024-36882 a network vulnerability?
CVE-2024-36882 is not specifically a network vulnerability; it involves memory allocation handling in the Linux kernel.
Can CVE-2024-36882 be exploited locally?
Yes, CVE-2024-36882 can potentially be exploited locally to affect system memory management.