CVE-2023-52489: 
Linux Kernel vulnerability analysis and mitigation

A race condition vulnerability was discovered in the Linux kernel's sparsemem memory management subsystem (CVE-2023-52489). The issue occurs when a PFN (Page Frame Number) falls into the device memory region with a specific system memory configuration where PFNs are arranged as [ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL]. The vulnerability was discovered in October 2023 and affects the memory section usage handling (Kernel Git).

The vulnerability stems from a race condition between pfn_valid()/pfn_section_valid() and section deactivate operations with CONFIG_SPASEMEM_VMEMAP enabled. When compaction is triggered on device memory PFNs (which results in NOP since pfn_to_online_page() returns NULL for ZONE_DEVICE memory sections), while simultaneously another core is removing section mappings for the ZONE_DEVICE region, it can lead to accessing a NULL pointer in ms->usage (Red Hat CVE).

The vulnerability can result in a kernel crash (denial of service) when exploited. This occurs due to NULL pointer dereference when accessing memory_section->usage under specific conditions, compromising system availability (Red Hat CVE).

The vulnerability requires local access and specific memory configurations to be exploited. It has been observed in real-world scenarios, particularly on Snapdragon SoC devices with the mentioned memory configuration of PFNs as [ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL] (Kernel Git).

The issue has been fixed by implementing three key changes: 1) Clearing SECTION_HAS_MEM_MAP before freeing the ->usage, 2) Adding RCU protected read side critical section, and 3) Using kfree_rcu() for freeing ->usage and setting ms->usage to NULL. The fix ensures that no attempt will be made to access ->usage after SECTION_HAS_MEM_MAP is cleared (Kernel Git).