DEBIAN-CVE-2024-57881
- Source
- https://security-tracker.debian.org/tracker/CVE-2024-57881
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-57881.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2024-57881
- Upstream
- Published
- 2025-01-11T16:15:24Z
- Modified
- 2025-09-25T04:24:43.857134Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage() on possibly non-existent PFN in splitlargebuddy() In splitlargebuddy(), we might call pfntopage() on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last memory section, this could result with CONFIGSPARSEMEM && !CONFIGSPARSEMEMEXTREME in _pfntosection() returning NULL and and _sectionmemmapaddr() dereferencing that NULL pointer. Let's fix it, and avoid doing a pfnto_page() call for the first iteration, where we already have the page. So far this was found by code inspection, but let's just CC stable as the fix is easy.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source