CVE-2024-56544

Summary

CVE-2024-56544 is a vulnerability in the Linux kernel that affects udmabuf. The issue arises when the folios array is changed from kmalloc to kvmalloc. With a PAGE_SIZE of 4096, MAX_PAGE_ORDER of 10, and on a 64-bit machine, udmabuf can only support 4MB of memory. If the size limit is changed to 3072 (3GB) and 3GB of udmabuf is attempted to be allocated, an error will occur. This issue can lead to failures in memory allocation and can result in system instability. The patch to resolve this vulnerability changes the udmabuf array to use kvmalloc_array, which can fallback to vmalloc for larger allocations, ensuring successful memory allocation and maintaining the performance of kmalloc allocations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.