CVE-2024-42251: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-42251 affects the Linux kernel's memory management subsystem, specifically related to the folio_try_get_rcu() function. The vulnerability was discovered in non-SMP (non-Symmetric Multi-Processing) kernel configurations, where a bug in the page reference counting mechanism could trigger a kernel BUG assertion. The issue affects Linux kernel versions from 6.6 up to (excluding) 6.6.42, from 6.7 up to (excluding) 6.9.11, and version 6.10 release candidates (NVD).

The vulnerability stems from an optimization in the page reference counting mechanism that was introduced for non-SMP kernels. The issue manifests when process_vm_readv() calls GUP (Get User Pages) to pin THP (Transparent Huge Pages). The bug occurs due to try_grab_folio() being called outside of atomic context in non-SMP kernels, violating the requirement for either interrupts or preemption to be disabled. This triggers a VM_BUG_ON(!in_atomic() && !irqs_disabled()) assertion in folio_ref_try_add_rcu(). The CVSS v3.1 base score is 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can cause a denial of service condition through a kernel panic triggered by the BUG assertion. The impact is limited to local attacks and primarily affects system availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability requires local access and can be triggered through the process_vm_readv() system call. It specifically affects non-SMP kernel configurations and is more likely to be exposed when using Transparent Huge Pages. The issue was discovered and reported by the kernel test robot (Kernel Patch).

The vulnerability has been fixed by removing the optimization for non-SMP kernels, which was deemed outdated and unnecessary. The fix involves replacing folio_try_get_rcu() with standard reference counting mechanisms. Users should update to Linux kernel versions 6.6.42, 6.9.11, or later to address this vulnerability (Kernel Patch).