CVE-2021-47491

mm: khugepaged: skip huge page collapse for special files

State
Published
Severity
Not scored
Published
May 22, 2024
Updated
May 11, 2026
Reserved
May 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: khugepaged: skip huge page collapse for special files

The read-only THP for filesystems will collapse THP for files opened readonly and mapped with VM_EXEC. The intended usecase is to avoid TLB misses for large text segments. But it doesn't restrict the file types so a THP could be collapsed for a non-regular file, for example, block device, if it is opened readonly and mapped with EXEC permission. This may cause bugs, like [1] and [2].

This is definitely not the intended usecase, so just collapse THP for regular files in order to close the attack surface.

[shy828301@gmail.com: fix vm_file check [3]]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99cb0dbd47a15d395bf3faa78dc122bc5efe3fc0 to before 6d67b2a73b8e3a079c355bab3c1aef7d85a044b8Affected
  • 99cb0dbd47a15d395bf3faa78dc122bc5efe3fc0 to before 5fcb6fce74ffa614d964667110cf1a516c48c6d9Affected
  • 99cb0dbd47a15d395bf3faa78dc122bc5efe3fc0 to before a4aeaa06d45e90f9b279f0b09de84bd00006e733Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.10.78 through 5.10.*Not affected
  • 5.14.16 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.