CVE-2021-47491: mm: khugepaged: skip huge page collapse for special files
In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The Linux kernel CVE team has assigned CVE-2021-47491 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052241-CVE-2021-47491-437d@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mm: khugepaged: skip huge page collapse for special files
The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VMEXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].
This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.
[shy828301@gmail.com: fix vmfile check [3]]
— NVD
Linux Kernel is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause collapse in read-only THP for filesystems.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47491?
CVE-2021-47491 is considered a moderate severity vulnerability due to its potential impact on system stability and performance.
How do I fix CVE-2021-47491?
To address CVE-2021-47491, it is recommended to upgrade the Linux kernel to version 5.10.78, 5.14.16, or any version higher than 5.15.
What systems are affected by CVE-2021-47491?
CVE-2021-47491 affects specific Red Hat kernel versions and IBM Security Verify Governance versions up to ISVG 10.0.2.
What impact does CVE-2021-47491 have on users?
Users may experience performance degradation or system instability related to huge page management in the Linux kernel due to CVE-2021-47491.
Is there a workaround for CVE-2021-47491?
Currently, there are no official workarounds for CVE-2021-47491; upgrading the kernel is the recommended solution.