CVE-2024-57839: Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()"
In the Linux kernel, the following vulnerability has been resolved:
Revert "readahead: properly shorten readahead when falling back to dopagecachera()"
This reverts commit 7c877586da3178974a8a94577b6045a48377ff25.
Anders and Philippe have reported that recent kernels occasionally hang when used with NFS in readahead code. The problem has been bisected to 7c877586da3 ("readahead: properly shorten readahead when falling back to dopagecachera()"). The cause of the problem is that ra->size can be shrunk by readpages() call and subsequently we end up calling dopagecachera() with negative (read huge positive) number of pages. Let's revert 7c877586da3 for now until we can find a proper way how the logic in readpages() and pagecacheraorder() can coexist. This can lead to reduced readahead throughput due to readahead window confusion but that's better than outright hangs.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57839?
The severity of CVE-2024-57839 has not been explicitly rated, but vulnerabilities in the Linux kernel can vary depending on their impact on system security and stability.
What systems are affected by CVE-2024-57839?
CVE-2024-57839 affects certain versions of the Linux kernel where the revert of specific commit occurred.
How do I fix CVE-2024-57839?
To fix CVE-2024-57839, ensure that you are running an updated version of the Linux kernel that includes the patch for this vulnerability.
What is the nature of CVE-2024-57839?
CVE-2024-57839 is related to an issue with the readahead functionality in the Linux kernel that has been reverted.
Has CVE-2024-57839 been patched in recent kernel releases?
Yes, CVE-2024-57839 has been resolved in the latest kernel updates that you should apply.