SECUFOCUSNOW
Home›CVE index›CVE-2024-56628
Review reviewHigh

CVE-2024-56628

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific huge_pte_clear() When executing mm selftests run_vmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x0 flags: 0xffff0000002000(reserved|node=0|zone=0|lastcpupid=0xffff) raw: 00ffff0000002000 ffffbf0000000008 ffffbf0000000008 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules l...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.12.28
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific huge_pte_clear() When executing mm selftests run_vmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x0 flags: 0xffff0000002000(reserved|node=0|zone=0|lastcpupid=0xffff) raw: 00ffff0000002000 ffffbf0000000008 ffffbf0000000008 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules l...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < dba3c45e333a3a2a01395b5f5e5f88f8baba74e4, >= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 7dfbf011a57b9e1a40f5ce8080a53c497e105c6c, >= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 9b602190cf2d8ac957be0011e418ed6c3b49b9a3, >= 09cfefb7fa70c3af011b0db0a513fd80b2f18abc < 7cd1f5f77925ae905a57296932f0f9ef0dc364f8, >= 5.19, >= 5.19 < 6.1.120, >= 6.2 < 6.6.66, >= 6.7 < 6.12.5, 6.13
Fixed versions
6.1.120, 6.6.66, 6.12.5

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2024-56628 — Linux Linux, linux kernel | SECUFOCUS NOW