CVE-2024-36000

CVE-2024-36000 addresses a synchronization issue in the Linux kernel's management of huge pages. The problem arises when multiple threads modify the reservation map concurrently without proper locking, leading to potential inconsistencies and system instability.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local authenticated users and primarily results in a kernel crash or system lockup rather than privilege escalation or arbitrary code execution. Under typical enterprise deployments, triggering this synchronization flaw requires concurrent threads to race while altering hugetlb reservation mappings in a shared memory region. Because this condition demands specific multithreaded local access and only impacts availability, the overall risk to production environments is contained.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.