CVE-2024-46790

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

codetag: debug: mark codetags for poisoned page as empty

When PG_hwpoison pages are freed they are treated differently in

free_pages_prepare() and instead of being released they are isolated.

Page allocation tag counters are decremented at this point since the page

is considered not in use. Later on when such pages are released by

unpoison_memory(), the allocation tag counters will be decremented again

and the following warning gets reported:

[ 113.930443][ T3282] ------------[ cut here ]------------

[ 113.931105][ T3282] alloc_tag was not set

[ 113.931576][ T3282] WARNING: CPU: 2 PID: 3282 at ./include/linux/alloc_tag.h:130 pgalloc_tag_sub.part.66+0x154/0x164

[ 113.932866][ T3282] Modules linked in: hwpoison_inject fuse ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 ipt_REJECT nf_reject_ipv4 xt_conntrack ebtable_nat ebtable_broute ip6table_nat ip6table_man4

[ 113.941638][ T3282] CPU: 2 UID: 0 PID: 3282 Comm: madvi

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References