Threats tagged 'ghsa-gwjv-8q72-w8xf'

CVE-2024-56677 is a medium severity vulnerability in the Linux kernel's powerpc/fadump subsystem. It involves improper initialization order of the fadump_cma_init function, which is called before the pageblock_order is set during initmem_init(). This leads to bypassing the CMA memory alignment check, potentially causing a kernel bug (VM_BUG_ON_PAGE) when cma_activate_area() is called on a misaligned reserved memory area. The issue is fixed by moving fadump_cma_init() to execute after initmem_init().