CVE-2024-50200

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

maple_tree: correct tree corruption on spanning store

Patch series "maple_tree: correct tree corruption on spanning store", v3.

There has been a nasty yet subtle maple tree corruption bug that appears

to have been in existence since the inception of the algorithm.

This bug seems far more likely to happen since commit f8d112a4e657

("mm/mmap: avoid zeroing vma tree in mmap_region()"), which is the point

at which reports started to be submitted concerning this bug.

We were made definitely aware of the bug thanks to the kind efforts of

Bert Karwatzki who helped enormously in my being able to track this down

and identify the cause of it.

The bug arises when an attempt is made to perform a spanning store across

two leaf nodes, where the right leaf node is the rightmost child of the

shared parent, AND the store completely consumes the right-mode node.

This results in mas_wr_spanning_store() mitakenly duplicating the ne

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References