CVE-2024-56544

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
27/12/2024
Last modified:
03/02/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> udmabuf: change folios array from kmalloc to kvmalloc<br /> <br /> When PAGE_SIZE 4096, MAX_PAGE_ORDER 10, 64bit machine,<br /> page_alloc only support 4MB.<br /> If above this, trigger this warn and return NULL.<br /> <br /> udmabuf can change size limit, if change it to 3072(3GB), and then alloc<br /> 3GB udmabuf, will fail create.<br /> <br /> [ 4080.876581] ------------[ cut here ]------------<br /> [ 4080.876843] WARNING: CPU: 3 PID: 2015 at mm/page_alloc.c:4556 __alloc_pages+0x2c8/0x350<br /> [ 4080.878839] RIP: 0010:__alloc_pages+0x2c8/0x350<br /> [ 4080.879470] Call Trace:<br /> [ 4080.879473] <br /> [ 4080.879473] ? __alloc_pages+0x2c8/0x350<br /> [ 4080.879475] ? __warn.cold+0x8e/0xe8<br /> [ 4080.880647] ? __alloc_pages+0x2c8/0x350<br /> [ 4080.880909] ? report_bug+0xff/0x140<br /> [ 4080.881175] ? handle_bug+0x3c/0x80<br /> [ 4080.881556] ? exc_invalid_op+0x17/0x70<br /> [ 4080.881559] ? asm_exc_invalid_op+0x1a/0x20<br /> [ 4080.882077] ? udmabuf_create+0x131/0x400<br /> <br /> Because MAX_PAGE_ORDER, kmalloc can max alloc 4096 * (1

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 6.11.11 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.12 (including) 6.12.2 (excluding)