CVE-2024-50066
kernel: mm/mremap: fix move_normal_pmd/retract_page_tables race
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 23, 2024
Updated · September 14, 2026
Description
A flaw was found in the Linux kernel. A race condition exists in the mremap() system call, specifically between the move_normal_pmd and retract_page_tables functions. This timing vulnerability could allow a local attacker, with the ability to create shared memory or file Transparent Huge Page (THP) mappings, to create bogus page directory entries. Successful exploitation of this flaw could lead to a user gaining elevated privileges to the kernel.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')