CVE-2024-50199— mm/swapfile: skip HugeTLB pages for unuse_vma
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-50199
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mm/swapfile: skip HugeTLB pages for unuse_vma
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: skip HugeTLB pages for unuse_vma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The problem can be reproduced by the following steps: 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory. 2. Swapout the above anonymous memory. 3. run swapoff and we will get a bad pud error in kernel message: mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7) We can tell that pud_clear_bad is called by pud_none_or_clear_bad in unuse_pud_range() by ftrace. And therefore the HugeTLB pages will never be freed because we lost it from page table. We can skip HugeTLB pages for unuse_vma to fix it.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于对HugeTLB页面处理不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-50199
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50199
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-11-08 · 38 CVEs total
| CVE-2024-50203 | bpf, arm64: Fix address emission with tag-based KASAN enabled | |
| CVE-2024-50193 | x86/entry_32: Clear CPU buffers after register restore in NMI return | |
| CVE-2024-50194 | arm64: probes: Fix uprobes for big-endian kernels | |
| CVE-2024-50195 | posix-clock: Fix missing timespec64 check in pc_clock_settime() | |
| CVE-2024-50196 | pinctrl: ocelot: fix system hang on level based interrupts | |
| CVE-2024-50197 | pinctrl: intel: platform: fix error path in device_for_each_child_node() | |
| CVE-2024-50198 | iio: light: veml6030: fix IIO device retrieval from embedded device | |
| CVE-2024-50200 | maple_tree: correct tree corruption on spanning store | |
| CVE-2024-50201 | drm/radeon: Fix encoder->possible_clones | |
| CVE-2024-50202 | nilfs2: propagate directory read errors from nilfs_find_entry() | |
| CVE-2024-50192 | irqchip/gic-v4: Don't allow a VMOVP on a dying VPE | |
| CVE-2024-50204 | fs: don't try and remove empty rbtree node | |
| CVE-2024-50205 | ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() | |
| CVE-2024-50206 | net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init | |
| CVE-2024-50207 | ring-buffer: Fix reader locking when changing the sub buffer order | |
| CVE-2024-50209 | RDMA/bnxt_re: Add a check for memory allocation | |
| CVE-2024-50208 | RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages | |
| CVE-2024-50210 | posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() | |
| CVE-2024-50211 | udf: refactor inode_bmap() to handle error | |
| CVE-2024-50183 | scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-50199
No comments yet