CVE-2024-43832: s390/uv: Don't call folio_wait_writeback() without a folio reference
In the Linux kernel, the following vulnerability has been resolved:
s390/uv: Don't call foliowaitwriteback() without a folio reference
foliowaitwriteback() requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed concurrently. So grab a temporary reference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43832?
CVE-2024-43832 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-43832?
To fix CVE-2024-43832, update your Linux kernel to the remedied versions such as 6.1.123-1 or any version specified in your distribution's advisory.
What systems are affected by CVE-2024-43832?
CVE-2024-43832 affects certain versions of the Linux kernel including 5.10.x and 6.12.x series.
What does CVE-2024-43832 vulnerability entail?
CVE-2024-43832 involves a flaw in the Linux kernel where folio_wait_writeback() can be called without holding a folio reference.
Is there a workaround for CVE-2024-43832?
There is no known workaround for CVE-2024-43832, so it is recommended to apply the security updates as soon as possible.