CVE-2024-46838: userfaultfd: don't BUG_ON() if khugepaged yanks our page table
In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: don't BUGON() if khugepaged yanks our page table
Since khugepaged was changed to allow retracting page tables in file mappings without holding the mmap lock, these BUGON()s are wrong - get rid of them.
We could also remove the preceding "if (unlikely(...))" block, but then we could reach pteoffsetmaplock() with transhuge pages not just for file mappings but also for anonymous mappings - which would probably be fine but I think is not necessarily expected.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46838?
CVE-2024-46838 has been classified as having moderate severity due to its implications for system stability.
How do I fix CVE-2024-46838?
To fix CVE-2024-46838, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What versions of the Linux kernel are affected by CVE-2024-46838?
CVE-2024-46838 affects Linux kernel versions between 6.7 and 6.10.10, as well as specific release candidates of 6.11.
Is CVE-2024-46838 exploitable remotely?
CVE-2024-46838 is not classified as remotely exploitable, as it primarily affects local system operations.
Does CVE-2024-46838 impact security features in the Linux kernel?
CVE-2024-46838 primarily affects system stability rather than directly impacting security features.