CVE-2024-41021: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
In the Linux kernel, the following vulnerability has been resolved:
s390/mm: Fix VMFAULTHWPOISON handling in doexception()
There is no support for HWPOISON, MEMORYFAILURE, or ARCHHASCOPYMC on s390. Therefore we do not expect to see VMFAULTHWPOISON in doexception().
However, since commit af19487f00f3 ("mm: make PTEMARKERSWAPINERROR more general"), it is possible to see VMFAULTHWPOISON in combination with PTEMARKERPOISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the BUG() in doexception().
Fix this by treating VMFAULTHWPOISON the same as VMFAULTSIGBUS, similar to x86 when MEMORYFAILURE is not configured. Also print unexpected fault flags, for easier debugging.
Note that VMFAULTHWPOISONLARGE is not expected, because s390 cannot support swap entries on other levels than PTE level.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41021?
CVE-2024-41021 has a medium severity level due to its potential impact on handling memory faults in the Linux kernel on s390 architecture.
How do I fix CVE-2024-41021?
To mitigate CVE-2024-41021, update your Linux kernel to one of the patched versions such as 5.10.223-1, 5.10.226-1, 6.1.119-1, or newer.
What systems are affected by CVE-2024-41021?
CVE-2024-41021 affects Linux kernel versions prior to the specified fixed releases, primarily on the s390 architecture.
Is CVE-2024-41021 present in all Linux kernel versions?
No, CVE-2024-41021 is specific to certain Linux kernel versions on the s390 architecture and doesn't apply to all Linux distributions.
What impact does CVE-2024-41021 have on system performance?
CVE-2024-41021 can potentially affect system stability and memory management on affected s390 systems if not addressed.