Описание
In the Linux kernel, the following vulnerability has been resolved:
page_pool: always add GFP_NOWARN for ATOMIC allocations
Driver authors often forget to add GFP_NOWARN for page allocation
from the datapath. This is annoying to users as OOMs are a fact
of life, and we pretty much expect network Rx to hit page allocation
failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations
by default.
A flaw was found in the Linux kernel. When driver authors fail to include the GFP_NOWARN flag for ATOMIC page allocations within the datapath, it can lead to issues. This omission may cause network receive operations to experience page allocation failures during out-of-memory (OOM) conditions. The primary consequence is a Denial of Service (DoS) for the affected system.
Отчет
A LOW impact flaw was found in the Linux kernel network page_pool implementation used in Red Hat Enterprise Linux and Red Hat In-Vehicle OS. When a network driver performs ATOMIC page allocations on the receive datapath without the GFP_NOWARN flag, network receive (Rx) processing may hit page allocation failures during out-of-memory (OOM) conditions, which can result in a denial of service on the affected system. Red Hat Enterprise Linux 6 is not affected because the vulnerable code is not present in that release. The affected Red Hat Enterprise Linux 7 through 10 kernel and kernel-rt streams and Red Hat In-Vehicle OS 1.1 currently have fixes deferred, as this issue is rated low impact; the residual risk is that network receive processing on affected systems can experience page allocation failures while the system is under sustained memory pressure. Red Hat's severity assessment (impact LOW, CVSS 3.1 score 5.5 with a local attack vector) differs from the upstream CVE.org rating (IMPORTANT, CVSS 3.1 score 7.5 with a network attack vector) because the failure condition depends on the system already being under out-of-memory pressure rather than on remote attacker-controlled input.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.
In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.
In the Linux kernel, the following vulnerability has been resolved: p ...
In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page allocation from the datapath. This is annoying to users as OOMs are a fact of life, and we pretty much expect network Rx to hit page allocation failures during OOM. Make page pool add GFP_NOWARN for ATOMIC allocations by default.
Уязвимость функции __page_pool_alloc_netmems_slow() модуля net/core/page_pool.c поддержки сетевых функций ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.5 Medium
CVSS3