CVE Database›CVE-2024-36882

CVE-2024-36882

kernel: mm: use memalloc_nofs_save() in page_cache_ra_order()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 30, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's memory management subsystem. A local user could trigger a system deadlock during page cache readahead operations involving large memory pages. This issue can cause system tasks to hang indefinitely, resulting in a Denial of Service (DoS).

Statement

This vulnerability is rated as Moderate because exploitation is limited to a local denial of service without compromising system confidentiality or integrity. An authenticated local user can induce readahead operations on large folios under memory pressure, triggering a kernel deadlock and leaving system processes in an unrecoverable hung state. Because triggering this condition requires local access and execution privileges on the host system, the overall security risk to standard Red Hat environments remains bounded.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-833 · Deadlock