Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.3.0-rc5-150500.34, < 6.3.0-rc5-150500.34-D81
A vulnerability in the Linux kernel's handling of devdax devices can lead to a kernel crash on PowerPC architecture with hash translation. This issue arises because the vmemmap optimization for devdax, introduced in a recent commit, is not compatible with the way vmemmap mappings are managed on this architecture. The crash occurs when the kernel attempts to access a memory area that is not properly mapped, leading to a data access error. The problem has been traced to the vmemmap_populate_compound_pages function, which fails to recognize the architecture-specific mapping requirements.
The vulnerability causes a kernel crash, disrupting system operations and potentially leading to a denial of service.
The vulnerability can be reproduced by probing devdax devices on a PowerPC system with hash translation, running a version of the Linux kernel that includes the vulnerable vmemmap optimization for devdax. The crash can be observed in the kernel logs, where a 'Unable to handle kernel data access on write' error is reported, indicating a failure in managing memory mappings correctly.
Users can upgrade to a patched version of the Linux kernel that addresses this vulnerability. The latest stable releases should be consulted for this patch.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.