CVE-2024-35872

In the Linux kernel, the following vulnerability has been resolved:

mm/secretmem: fix GUP-fast succeeding on secretmem folios

The Linux kernel CVE team has assigned CVE-2024-35872 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051941-CVE-2024-35872-4632@gregkh/T

This vulnerability is rated as Moderate impact because exploitation requires local unprivileged access and results in a denial of service through a system crash, without allowing arbitrary code execution or data exposure. The flaw arises from an unreliable flag check when handling secret memory pages during fast user page retrieval, leading to an unexpected kernel panic when unmapped folios are accessed. Standard Red Hat Enterprise Linux installations are not exposed by default, as the secret memory subsystem is not enabled in default kernel configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.