NetSight
IP …
medium5.5

CVE-2022-50285

In the Linux kernel, the following vulnerability has been resolved: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages The h->*_huge_pages co…

Impact

In the Linux kernel, the following vulnerability has been resolved: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages The h->*_huge_pages counters are protected by the hugetlb_lock, but alloc_huge_page has a corner case where it can decrement the counter outside of the lock. This could lead to a corrupted value of h->resv_huge_pages, which we have observed on our systems. Take the hugetlb_lock before decrementing h->resv_huge_pages to avoid a potential race.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.3.6 before 4.4
from 4.4.1 before 4.9.332
from 4.10 before 4.14.298
from 4.15 before 4.19.264
from 4.20 before 5.4.223
from 5.5 before 5.10.153

References