CVE-2024-46838

Summary

CVE-2024-46838 is a vulnerability affecting the Linux kernel's userfaultfd subsystem. The issue lies in the incorrect use of the BUG_ON() function when handling page table modifications by khugepaged. This function is no longer necessary since khugepaged now allows retracting page tables without holding the mmap lock. Removing the preceding "if (unlikely(...))" block could also allow reaching pte_offset_map_lock() with transhuge pages for both file mappings and anonymous mappings. However, this is probably fine but not necessarily expected. This vulnerability has been resolved in the latest Linux kernel updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.