CVE-2024-56544
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
27/12/2024
Last modified:
03/02/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
udmabuf: change folios array from kmalloc to kvmalloc<br />
<br />
When PAGE_SIZE 4096, MAX_PAGE_ORDER 10, 64bit machine,<br />
page_alloc only support 4MB.<br />
If above this, trigger this warn and return NULL.<br />
<br />
udmabuf can change size limit, if change it to 3072(3GB), and then alloc<br />
3GB udmabuf, will fail create.<br />
<br />
[ 4080.876581] ------------[ cut here ]------------<br />
[ 4080.876843] WARNING: CPU: 3 PID: 2015 at mm/page_alloc.c:4556 __alloc_pages+0x2c8/0x350<br />
[ 4080.878839] RIP: 0010:__alloc_pages+0x2c8/0x350<br />
[ 4080.879470] Call Trace:<br />
[ 4080.879473] <br />
[ 4080.879473] ? __alloc_pages+0x2c8/0x350<br />
[ 4080.879475] ? __warn.cold+0x8e/0xe8<br />
[ 4080.880647] ? __alloc_pages+0x2c8/0x350<br />
[ 4080.880909] ? report_bug+0xff/0x140<br />
[ 4080.881175] ? handle_bug+0x3c/0x80<br />
[ 4080.881556] ? exc_invalid_op+0x17/0x70<br />
[ 4080.881559] ? asm_exc_invalid_op+0x1a/0x20<br />
[ 4080.882077] ? udmabuf_create+0x131/0x400<br />
<br />
Because MAX_PAGE_ORDER, kmalloc can max alloc 4096 * (1
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.20 (including) | 6.11.11 (excluding) |
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (including) | 6.12.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page