CVE-2024-45022

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0

The __vmap_pages_range_noflush() assumes its argument pages** contains

pages with the same page shift. However, since commit e9c3cda4d86e ("mm,

vmalloc: fix high order __GFP_NOFAIL allocations"), if gfp_flags includes

__GFP_NOFAIL with high order in vm_area_alloc_pages() and page allocation

failed for high order, the pages** may contain two different page shifts

(high order and order-0). This could lead __vmap_pages_range_noflush() to

perform incorrect mappings, potentially resulting in memory corruption.

Users might encounter this as follows (vmap_allow_huge = true, 2M is for

PMD_SIZE):

kvmalloc(2M, __GFP_NOFAIL|GFP_X)

__vmalloc_node_range_noprof(vm_flags=VM_ALLOW_HUGE_VMAP)

vm_area_alloc_pages(order=9) ---> order-9 allocation failed and fallback to order-0

vmap_pages_range()

vmap_pag

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References