CVE-2024-41021

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41021
In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on s390. Therefore we do not expect to see VM_FAULT_HWPOISON in do_exception(). However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more general"), it is possible to see VM_FAULT_HWPOISON in combination with PTE_MARKER_POISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the BUG() in do_exception(). Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault flags, for easier debugging. Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot support swap entries on other levels than PTE level.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 Patch
https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff Patch
https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b Patch
https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a Patch
https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff Patch
https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b Patch
https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Sep 2025, 20:05

Type Values Removed Values Added
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 - () https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 - Patch
References () https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff - () https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff - Patch
References () https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b - () https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b - Patch
References () https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a - () https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a - Patch

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff - () https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff -
References () https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b - () https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b -
References () https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a - () https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a -

12 Aug 2024, 13:38

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: s390/mm: corrija el manejo de VM_FAULT_HWPOISON en do_exception() No hay soporte para HWPOISON, MEMORY_FAILURE o ARCH_HAS_COPY_MC en s390. Por lo tanto, no esperamos ver VM_FAULT_HWPOISON en do_exception(). Sin embargo, desde la confirmación af19487f00f3 ("mm: hacer que PTE_MARKER_SWAPIN_ERROR sea más general"), es posible ver VM_FAULT_HWPOISON en combinación con PTE_MARKER_POISONED, incluso en arquitecturas que no admiten HWPOISON de otra manera. En este caso, terminaremos en el ERROR() en do_exception(). Solucione este problema tratando VM_FAULT_HWPOISON de la misma manera que VM_FAULT_SIGBUS, similar a x86 cuando MEMORY_FAILURE no está configurado. También imprima indicadores defallos inesperadas para facilitar la depuración. Tenga en cuenta que no se espera VM_FAULT_HWPOISON_LARGE, porque s390 no puede admitir entradas de intercambio en otros niveles que no sean el nivel PTE.

29 Jul 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-29 14:15

Updated : 2025-09-25 20:05

NVD link : CVE-2024-41021

Mitre link : CVE-2024-41021

CVE.ORG link : CVE-2024-41021

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime