Linux Kernel Memory Management Vulnerability Leading to Denial-of-Service

Vulnerability

A vulnerability in the Linux kernel's memory management system can cause a denial-of-service condition by creating an infinite loop in the 'throttle_direct_reclaim()' function. This issue arises when the 'allow_direct_reclaim(pgdat)' function consistently returns false, causing the system to improperly manage memory zones, particularly under pressure. The problem is exacerbated in systems without swap space, leading to incorrect assessments of memory availability and zone balance. As a result, the kernel can become unresponsive, with tasks stuck in the reclaim process.

Impact

Exploitation of this vulnerability can cause the kernel to hang, with tasks trapped in the 'throttle_direct_reclaim()' function. This occurs because the system incorrectly evaluates the memory state as balanced, despite certain zones experiencing significant pressure, leading to a failure in proper memory management and reclamation.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.