CVE-2024-56544udmabuf: change folios array from kmalloc to kvmalloc
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: udmabuf: change folios array from kmalloc to kvmalloc When PAGE_SIZE 4096, MAX_PAGE_ORDER 10, 64bit machine, page_alloc only support 4MB. If above this, trigger this warn and return NULL. udmabuf can change size limit, if change it to 3072(3GB), and then alloc 3GB udmabuf, will fail create. [ 4080.876581] ------------[ cut here ]------------ [ 4080.876843] WARNING: CPU: 3 PID: 2015 at mm/page_alloc.c:4556 __alloc_pages+0x2c8/0x350 [ 4080.878839] RIP: 0010:__alloc_pages+0x2c8/0x350 [ 4080.879470] Call Trace: [ 4080.879473] <TASK> [ 4080.879473] ? __alloc_pages+0x2c8/0x350 [ 4080.879475] ? __warn.cold+0x8e/0xe8 [ 4080.880647] ? __alloc_pages+0x2c8/0x350 [ 4080.880909] ? report_bug+0xff/0x140 [ 4080.881175] ? handle_bug+0x3c/0x80 [ 4080.881556] ? exc_invalid_op+0x17/0x70 [ 4080.881559] ? asm_exc_invalid_op+0x1a/0x20 [ 4080.882077] ? udmabuf_create+0x131/0x400 Because MAX_PAGE_ORDER, kmalloc can max alloc 4096 * (1 << 10), 4MB memory, each array entry is pointer(8byte), so can save 524288 pages(2GB). Further more, costly order(order 3) may not be guaranteed that it can be applied for, due to fragmentation. This patch change udmabuf array use kvmalloc_array, this can fallback alloc into vmalloc, which can guarantee allocation for any size and does not affect the performance of kmalloc allocations.
- CVSS
- 5.5 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-476
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 21, 2026
- First seen by InfoSec Signals
- Oct 21, 2026
Affected products
Linux Linux linux:linux (from the name) | from fbb0de795078190a9834b3409e4b009cfb18a6d4 before 2384a29db79bd2cfe0b7646ac0030cb355825e29; from fbb0de795078190a9834b3409e4b009cfb18a6d4 before 2acc6192aa8570661ed37868c02c03002b1dc290; from fbb0de795078190a9834b3409e4b009cfb18a6d4 before 85bb72397cb63649fe493c96e27e1d0e4ed2ff63; from fbb0de795078190a9834b3409e4b009cfb18a6d4 before 1c0844c6184e658064e14c4335885785ad3bf84b | CNA record |
linux linux_kernel linux:linux_kernel | from 4.20 before 6.11.11; from 6.12 before 6.12.2 | NVD |
References
- https://git.kernel.org/stable/c/2384a29db79bd2cfe0b7646ac0030cb355825e29
- https://git.kernel.org/stable/c/2acc6192aa8570661ed37868c02c03002b1dc290patch
- https://git.kernel.org/stable/c/85bb72397cb63649fe493c96e27e1d0e4ed2ff63patch
- https://git.kernel.org/stable/c/1c0844c6184e658064e14c4335885785ad3bf84bpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.