CVE-2024-56628

published 2024-12-27

CVE-2024-56628: In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific huge_pte_clear() When executing mm selftests…

Priority P3 37 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Add architecture specific huge_pte_clear()

When executing mm selftests run_vmtests.sh, there is such an error:

BUG: Bad page state in process uffd-unit-tests pfn:00000
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x0
flags: 0xffff0000002000(reserved|node=0|zone=0|lastcpupid=0xffff)
raw: 00ffff0000002000 ffffbf0000000008 ffffbf0000000008 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in: snd_seq_dummy snd_seq snd_seq_device rfkill vfat fat
virtio_balloon efi_pstore virtio_net pstore net_failover failover fuse
nfnetlink virtio_scsi virtio_gpu virtio_dma_buf dm_multipath efivarfs
CPU: 2 UID: 0 PID: 1913 Comm: uffd-unit-tests Not tainted 6.12.0 #184
Hardware name: QEMU QEMU Virtual Machine, BIOS unknown 2/2/2022
Stack : 900000047c8ac000 0000000000000000 9000000000223a7c 900000047c8ac000
900000047c8af690 900000047c8af698 0000000000000000 900000047c8af7d8
900000047c8af7d0 900000047c8af7d0 900000047c8af5b0 0000000000000001
0000000000000001 900000047c8af698 10b3c7d53da40d26 0000010000000000
0000000000000022 0000000fffffffff fffffffffe000000 ffff800000000000
000000000000002f 0000800000000000 000000017a6d4000 90000000028f8940
0000000000000000 0000000000000000 90000000025aa5e0 9000000002905000
0000000000000000 90000000028f8940 ffff800000000000 0000000000000000
0000000000000000 0000000000000000 9000000000223a94 000000012001839c
00000000000000b0 0000000000000004 0000000000000000 0000000000071c1d
...
Call Trace:
[] show_stack+0x5c/0x180
[] dump_stack_lvl+0x6c/0xa0
[] bad_page+0x1a0/0x1f0
[] free_unref_folios+0xbf0/0xd20
[] folios_put_refs+0x1a4/0x2b8
[] free_pages_and_swap_cache+0x164/0x260
[] tlb_batch_pages_flush+0xa8/0x1c0
[] tlb_finish_mmu+0xa8/0x218
[] exit_mmap+0x1a0/0x360
[] __mmput+0x78/0x200
[] do_exit+0x43c/0xde8
[] do_group_exit+0x68/0x110
[] sys_exit_g

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.123-1 (bookworm)	linux 6.1.123-1 (bookworm)
debian	linux-6.1	< linux 6.1.123-1 (bookworm)	linux 6.1.123-1 (bookworm)
linux	linux	—	—
linux	linux	>= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < dba3c45e333a3a2a01395b5f5e5f88f8baba74e4	dba3c45e333a3a2a01395b5f5e5f88f8baba74e4
linux	linux	>= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 7dfbf011a57b9e1a40f5ce8080a53c497e105c6c	7dfbf011a57b9e1a40f5ce8080a53c497e105c6c
linux	linux	>= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 9b602190cf2d8ac957be0011e418ed6c3b49b9a3	9b602190cf2d8ac957be0011e418ed6c3b49b9a3
linux	linux	>= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 7cd1f5f77925ae905a57296932f0f9ef0dc364f8	7cd1f5f77925ae905a57296932f0f9ef0dc364f8
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.1.123-1	6.1.123-1
linux	linux_kernel	>= 0 < 6.12.5-1	6.12.5-1
linux	linux_kernel	>= 0 < 6.12.5-1	6.12.5-1
linux	linux_kernel	>= 5.19 < 6.1.120	6.1.120
linux	linux_kernel	>= 6.2 < 6.6.66	6.6.66
linux	linux_kernel	>= 6.7 < 6.12.5	6.12.5

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.8 HIGH

vendor_redhat 7.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.