CVE-2024-57884

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()

The task sometimes continues looping in throttle_direct_reclaim() because

allow_direct_reclaim(pgdat) keeps returning false.

#0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac

#1 [ffff80002cb6f900] __schedule at ffff800008abbd1c

#2 [ffff80002cb6f990] schedule at ffff800008abc50c

#3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550

#4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68

#5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660

#6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98

#7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8

#8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974

#9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4

At this point, the pgdat contains the following two zones:

NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: "

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References