CVE-2024-36882
kernel: mm: use memalloc_nofs_save() in page_cache_ra_order()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 30, 2024
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's memory management subsystem. A local user could trigger a system deadlock during page cache readahead operations involving large memory pages. This issue can cause system tasks to hang indefinitely, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as Moderate because exploitation is limited to a local denial of service without compromising system confidentiality or integrity. An authenticated local user can induce readahead operations on large folios under memory pressure, triggering a kernel deadlock and leaving system processes in an unrecoverable hung state. Because triggering this condition requires local access and execution privileges on the host system, the overall security risk to standard Red Hat environments remains bounded.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock