CVE-2024-40917: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-40917 affects the Linux kernel's memory block management system. The vulnerability was discovered and disclosed on July 12, 2024, specifically related to the memblock_set_node() function's handling of MAX_NUMNODES. The issue affects systems running the Linux kernel with NUMA configuration, particularly on x86 systems with SRAT covering space above 4GB (NVD).

The vulnerability occurs when the NUMA configuration is not properly refused by a CONFIG_NUMA=y kernel. This happens because memblock_validate_numa_coverage() only checks for NUMA_NO_NODE, which leads to memblock_alloc_range_nid()'s warning about MAX_NUMNODES triggering. The issue ultimately results in a NULL dereference in memmap_init() when attempting to access node 64's node data (NODE_SHIFT=6) (Kernel Commit).

The vulnerability can lead to a system crash through NULL pointer dereference when the system attempts to access invalid node data. This occurs specifically on systems with certain NUMA configurations where memory nodes are not properly handled (NVD).

The vulnerability requires specific conditions to be exploited, particularly on x86 systems with SRAT configurations covering space above 4GB. The issue manifests when the system has a particular NUMA configuration that triggers the improper handling of MAX_NUMNODES (Kernel Commit).

The issue has been patched by modifying memblock_set_node() to warn about and adjust the usage of MAX_NUMNODES, similar to other functions. The fix includes adding a warning message when MAX_NUMNODES is used and automatically converting it to NUMA_NO_NODE (Kernel Commit).