Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's VMW balloon driver has been addressed. During the migration of balloon pages, the old page is deflated before the new page is inflated. If the new page is successfully inflated, the old page is effectively deflated, reducing the balloon size. This indicates a successful migration, and the old page is returned to the buddy system. However, the migration core incorrectly leaves the page marked as isolated, leading to a warning when trying to return the page. This issue has been resolved by modifying the migration handling to correctly indicate a successful migration, ensuring consistency between the balloon driver and the migration core.
The vulnerability could lead to inconsistent page isolation states during balloon page migration, causing warnings and potential mismanagement of memory resources.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.