Threats tagged 'ghsa-7fv4-rmp7-g4qh'

CVE-2024-45022 is a medium severity vulnerability in the Linux kernel's memory management subsystem. It involves incorrect page mapping in the vmalloc area when vm_area_alloc_pages() falls back from a high-order allocation to order-0. This fallback can cause __vmap_pages_range_noflush() to map pages incorrectly, potentially leading to memory corruption and system instability or crashes. The issue arises because the pages array may contain pages with different page shifts, violating assumptions in the mapping function. The fix removes the fallback code, relying instead on a retry mechanism that handles order-0 allocations properly.