Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve gigantic pages without runtime support dissolve_free_hugetlb_folio() doesn't check hstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/ update_and_free_hugetlb_folio() silently bail for such folios, so it frees a still-listed folio and, on vmemmap restore failure, the add_hugetlb_folio() rollback corrupts the free list.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ddc1055b557506a6ea8930dfbd8d1555d6a3f01e; affected 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before ccf96a4b8626a001c13c5836d8357f31c57bbd8e; affected 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before 443628f755b35bf45044f68b970b65cd531c42fd; affected 6eb4e88a6d27022ea8aff424d47a0a5dfc9fcb34 before a363c62a653cc8b3e21da9545fa4e028ef50f9c3 |
| Linux / Linux | affected 5.13; unaffected 0 before 5.13; unaffected 6.12.112 through 6.12.*; unaffected 6.18.55 through 6.18.*; unaffected 7.2.9 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.