CVE-2024-46838: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: don't BUG_ON() if khugepaged yanks our page table Since khugepaged was changed to allow retracting page tables in file mappings without holding the mmap lock, these BUG_ON()s are wrong - get rid of them. We could also remove the preceding "if (unlikely(...))" block, but then we could reach pte_offset_map_lock() with transhuge pages not just for file mappings but also for anonymous mappings - which would probably be fine but I think is not necessarily expected.

Affected products

• Linux Linux Kernel: from 6.6, before 6.6.51 (fixed in 6.6.51); from 6.7, before 6.10.10 (fixed in 6.10.10); version 6.11 only

Published 2024-09-27. Last modified 2026-06-17.