An issue was discovered in _splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "4.5.5"
},
{
"fixed": "4.9.228"
},
{
"introduced": "4.10"
},
{
"fixed": "4.14.185"
},
{
"introduced": "4.15"
},
{
"fixed": "4.19.129"
},
{
"introduced": "4.20"
},
{
"fixed": "5.4.48"
},
{
"introduced": "5.5"
},
{
"fixed": "5.7.5"
}
],
"source": "CPE_FIELD",
"cpe": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"
},
{
"extracted_events": [
{
"fixed": "5.7.5"
}
],
"source": "DESCRIPTION"
}
]
}