In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap() When mremap()ing a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between the vma flags (which have uffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp cleared). This mismatch causes a subsequent mprotect(PROTWRITE) to trigger a warning in pagetablecheckpteflags() due to setting the pte to writable while uffd-wp is still set. Fix this by always explicitly clearing the uffd-wp pte/pmd flags on any such mremap() so that the values are consistent with the existing clearing of VMUFFDWP. Be careful to clear the logical flag regardless of its physical form; a PTE bit, a swap PTE bit, or a PTE marker. Cover PTE, huge PMD and hugetlb paths.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1013", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-azure-6.11-headers-6.11.0-1013", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-azure-6.11-tools-6.11.0-1013", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-azure-dbgsym", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1013-azure", "binary_version": "6.11.0-1013.13~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-gcp-6.11-headers-6.11.0-1013", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-gcp-6.11-tools-6.11.0-1013", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-gcp-64k-dbgsym", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1013-gcp-dbgsym", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1013-gcp", "binary_version": "6.11.0-1013.13~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1013-gcp-64k", "binary_version": "6.11.0-1013.13~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-24-generic-64k", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-headers-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-headers-6.11.0-24-generic-64k", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-24", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-hwe-6.11-headers-6.11.0-24", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-hwe-6.11-tools-6.11.0-24", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-6.11.0-24-generic-dbgsym", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-24-generic-64k", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-24-generic-64k-dbgsym", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-24-generic-dbgsym", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-6.11.0-24-generic-64k", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-extra-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-ipu6-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-ipu7-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-usbio-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-modules-vision-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-tools-6.11.0-24-generic", "binary_version": "6.11.0-24.24~24.04.1" }, { "binary_name": "linux-tools-6.11.0-24-generic-64k", "binary_version": "6.11.0-24.24~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-buildinfo-6.11.0-1012-lowlatency-64k", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-cloud-tools-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-headers-6.11.0-1012-lowlatency-64k", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1012-lowlatency-64k", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1012-lowlatency-64k-dbgsym", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-image-unsigned-6.11.0-1012-lowlatency-dbgsym", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1012", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1012", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1012", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-modules-6.11.0-1012-lowlatency-64k", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1012-lowlatency", "binary_version": "6.11.0-1012.13~24.04.1" }, { "binary_name": "linux-tools-6.11.0-1012-lowlatency-64k", "binary_version": "6.11.0-1012.13~24.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-headers-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-image-unsigned-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-image-unsigned-6.11.0-1020-oem-dbgsym", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-ipu6-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-ipu7-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-iwlwifi-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-usbio-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-modules-vision-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-oem-6.11-headers-6.11.0-1020", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-oem-6.11-tools-6.11.0-1020", "binary_version": "6.11.0-1020.20" }, { "binary_name": "linux-tools-6.11.0-1020-oem", "binary_version": "6.11.0-1020.20" } ] }