Loading vulnerability…
Linux Kernel THP Copy-on-Write Race Condition
CVE-2020-29368 is a race condition in the Linux kernel Transparent Huge Pages copy-on-write handling, specifically in the __split_huge_pmd function. Before Linux kernel 5.7.5, a race in the THP mapcount check can cause copy-on-write processing to grant unintended write access.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A successful race can provide unintended write access to memory that should remain protected by copy-on-write semantics. The vulnerability is assessed with high potential confidentiality, integrity, and availability impact, although reliable exploitation is difficult because the race window is very small.
If you can’t patch tonight, do this now.
No qualifying mitigation is available. Applying a fixed kernel update is the recommended corrective action.
Patch, then assume compromise.
Update to Linux kernel 5.7.5 or later, or install the vendor-supplied kernel package containing the upstream fix. For affected Red Hat Enterprise Linux 8 streams, install the applicable fixed kernel or kernel-rt erratum and reboot so that the updated kernel is running.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.