CVE-2024-41021

s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()

Description

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on s390. Therefore we do not expect to see VM_FAULT_HWPOISON in do_exception(). However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more general"), it is possible to see VM_FAULT_HWPOISON in combination with PTE_MARKER_POISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the BUG() in do_exception(). Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault flags, for easier debugging. Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot support swap entries on other levels than PTE level.

N/A

CVSS

Severity:

EPSS 0.12%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0
https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff
https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b
https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a

Frequently Asked Questions

What is the severity of CVE-2024-41021?: CVE-2024-41021 has not yet been assigned a CVSS score.
How to fix CVE-2024-41021?: To fix CVE-2024-41021, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-41021 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-41021 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-41021?: CVE-2024-41021 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.