CVE-2024-42241

一、漏洞信息
 漏洞编号：[CVE-2024-42241](https://nvd.nist.gov/vuln/detail/CVE-2024-42241)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:mm/shmem: disable PMD-sized page cache if neededFor shmem files, it s possible that PMD-sized page cache can t besupported by xarray.  For example, 512MB page cache on ARM64 when the basepage size is 64KB can t be supported by xarray.  It leads to errors as thefollowing messages indicate when this sort of xarray entry is split.WARNING: CPU: 34 PID: 7578 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128Modules linked in: binfmt_misc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6    nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject         nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4   ip_set rfkill nf_tables nfnetlink vfat fat virtio_balloon drm fuse xfs   libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 sha1_ce virtio_net  net_failover virtio_console virtio_blk failover dimlib virtio_mmioCPU: 34 PID: 7578 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #9Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)pc : xas_split_alloc+0xf8/0x128lr : split_huge_page_to_list_to_order+0x1c4/0x720sp : ffff8000882af5f0x29: ffff8000882af5f0 x28: ffff8000882af650 x27: ffff8000882af768x26: 0000000000000cc0 x25: 000000000000000d x24: ffff00010625b858x23: ffff8000882af650 x22: ffffffdfc0900000 x21: 0000000000000000x20: 0000000000000000 x19: ffffffdfc0900000 x18: 0000000000000000x17: 0000000000000000 x16: 0000018000000000 x15: 52f8004000000000x14: 0000e00000000000 x13: 0000000000002000 x12: 0000000000000020x11: 52f8000000000000 x10: 52f8e1c0ffff6000 x9 : ffffbeb9619a681cx8 : 0000000000000003 x7 : 0000000000000000 x6 : ffff00010b02ddb0x5 : ffffbeb96395e378 x4 : 0000000000000000 x3 : 0000000000000cc0x2 : 000000000000000d x1 : 000000000000000c x0 : 0000000000000000Call trace: xas_split_alloc+0xf8/0x128 split_huge_page_to_list_to_order+0x1c4/0x720 truncate_inode_partial_folio+0xdc/0x160 shmem_undo_range+0x2bc/0x6a8 shmem_fallocate+0x134/0x430 vfs_fallocate+0x124/0x2e8 ksys_fallocate+0x4c/0xa0 __arm64_sys_fallocate+0x24/0x38 invoke_syscall.constprop.0+0x7c/0xd8 do_el0_svc+0xb4/0xd0 el0_svc+0x44/0x1d8 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x17c/0x180Fix it by disabling PMD-sized page cache when HPAGE_PMD_ORDER is largerthan MAX_PAGECACHE_ORDER.  As Matthew Wilcox pointed, the page cache in ashmem file isn t represented by a multi-index entry and doesn t have thislimitation when the xarry entry is split until commit 6b24ca4a1a8d ( mm:Use multi-index entries in the page cache ).
 漏洞公开时间：2024-08-08 00:15:46
 漏洞创建时间：2024-08-08 08:48:35
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-42241
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-42241 | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-42241.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| suse_bugzilla | https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| suse_bugzilla | https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9 | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| suse_bugzilla | https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-42241 | https://bugzilla.suse.com/show_bug.cgi?id=1228986 |
| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-42241 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://git.kernel.org/linus/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 (6.10) | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-42241 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-42241 | https://ubuntu.com/security/CVE-2024-42241 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-42241 | https://ubuntu.com/security/CVE-2024-42241 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-42241 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 |  | nvd |
|  |  | https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 |  | nvd |
|  |  | https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9 |  | nvd |
| linux |  | https://git.kernel.org/linus/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 | https://git.kernel.org/linus/6b24ca4a1a8d4ee3221d6d44ddbb99f542e4bda3 | ubuntu |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
    In the Linux kernel, the following vulnerability has been resolved:mm/shmem: disable PMD-sized page cache if neededFor shmem files, it&#39;s possible that PMD-sized page cache can&#39;t besupported by xarray.  For example, 512MB page cache on ARM64 when the basepage size is 64KB can&#39;t be supported by xarray.  It leads to errors as thefollowing messages indicate when this sort of xarray entry is split.WARNING: CPU: 34 PID: 7578 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128Modules linked in: binfmt_misc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6    nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject         nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4   ip_set rfkill nf_tables nfnetlink vfat fat virtio_balloon drm fuse xfs   libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 sha1_ce virtio_net  net_failover virtio_console virtio_blk failover dimlib virtio_mmioCPU: 34 PID: 7578 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #9Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)pc : xas_split_alloc+0xf8/0x128lr : split_huge_page_to_list_to_order+0x1c4/0x720sp : ffff8000882af5f0x29: ffff8000882af5f0 x28: ffff8000882af650 x27: ffff8000882af768x26: 0000000000000cc0 x25: 000000000000000d x24: ffff00010625b858x23: ffff8000882af650 x22: ffffffdfc0900000 x21: 0000000000000000x20: 0000000000000000 x19: ffffffdfc0900000 x18: 0000000000000000x17: 0000000000000000 x16: 0000018000000000 x15: 52f8004000000000x14: 0000e00000000000 x13: 0000000000002000 x12: 0000000000000020x11: 52f8000000000000 x10: 52f8e1c0ffff6000 x9 : ffffbeb9619a681cx8 : 0000000000000003 x7 : 0000000000000000 x6 : ffff00010b02ddb0x5 : ffffbeb96395e378 x4 : 0000000000000000 x3 : 0000000000000cc0x2 : 000000000000000d x1 : 000000000000000c x0 : 0000000000000000Call trace: xas_split_alloc+0xf8/0x128 split_huge_page_to_list_to_order+0x1c4/0x720 truncate_inode_partial_folio+0xdc/0x160 shmem_undo_range+0x2bc/0x6a8 shmem_fallocate+0x134/0x430 vfs_fallocate+0x124/0x2e8 ksys_fallocate+0x4c/0xa0 __arm64_sys_fallocate+0x24/0x38 invoke_syscall.constprop.0+0x7c/0xd8 do_el0_svc+0xb4/0xd0 el0_svc+0x44/0x1d8 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x17c/0x180Fix it by disabling PMD-sized page cache when HPAGE_PMD_ORDER is largerthan MAX_PAGECACHE_ORDER.  As Matthew Wilcox pointed, the page cache in ashmem file isn&#39;t represented by a multi-index entry and doesn&#39;t have thislimitation when the xarry entry is split until commit 6b24ca4a1a8d (&#34;mm:Use multi-index entries in the page cache&#34;).The Linux kernel CVE team has assigned CVE-2024-42241 to this issue. 
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-24.03-LTS(6.6.0):受影响
2.openEuler-20.03-LTS-SP4(4.19.90):不受影响
3.openEuler-22.03-LTS-SP1(5.10.0):不受影响
4.openEuler-22.03-LTS-SP3(5.10.0):不受影响
5.openEuler-22.03-LTS-SP4(5.10.0):不受影响
6.master(6.6.0):不受影响
7.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP1(5.10.0):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.master(6.6.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-22.03-LTS-SP4(5.10.0):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-2124

Hi openeuler-ci-bot, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Kernel, and any of the maintainers.

@yangyingliang ,@jiaoff ,@guohaocs2c ,@hanjun-guo ,@woqidaideshi ,@newbeats ,@zhangyi089 ,@colyli ,@thundertown ,@htforge ,@chiqijun ,@lengchao ,@zhujianwei001 ,@kylin-mayukun ,@wangxiongfeng ,@wkfxxx ,@SuperSix173 ,@jentlestea ,@oskernel0719 ,@gasonchen 
**issue处理注意事项:** 
**1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;**
**2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;**
**3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否))不能省略,省略后cve-manager将无法正常解析填写内容.**
************************************************************************
影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响): 
1.master(6.1.0):
2.openEuler-20.03-LTS-SP4(4.19.90):
3.openEuler-22.03-LTS-SP1(5.10.0):
4.openEuler-22.03-LTS-SP3(5.10.0):
5.openEuler-22.03-LTS-SP4(5.10.0):
6.openEuler-24.03-LTS(6.6.0):
7.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：
1.master(6.1.0):
2.openEuler-20.03-LTS-SP4(4.19.90):
3.openEuler-22.03-LTS-SP1(5.10.0):
4.openEuler-22.03-LTS-SP3(5.10.0):
5.openEuler-22.03-LTS-SP4(5.10.0):
6.openEuler-24.03-LTS(6.6.0):
7.openEuler-24.03-LTS-Next(6.6.0):

-----------------------------------------------------------------------
issue处理具体操作请参考: 
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

参考网址	关联pr	状态	补丁链接
https://nvd.nist.gov/vuln/detail/CVE-2024-42241	None	None	https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9
https://ubuntu.com/security/CVE-2024-42241	None	None	https://discourse.ubuntu.com/c/ubuntu-pro
https://www.opencve.io/cve/CVE-2024-42241	None	None	https://git.kernel.org/stable/c/93893eacb372b0a4a30f7de6609b08c3ba6c4fd9 https://git.kernel.org/stable/c/9fd154ba926b34c833b7bfc4c14ee2e931b3d743 https://git.kernel.org/stable/c/cd25208ca9b0097f8e079d692fc678f36fdbc3f9
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2024-42241
https://security-tracker.debian.org/tracker/CVE-2024-42241

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

CVE-2024-42241

影响性分析说明：
In the Linux kernel, the following vulnerability has been resolved:

mm/shmem: disable PMD-sized page cache if needed

For shmem files, it&#39;s possible that PMD-sized page cache can&#39;t be
supported by xarray.  For example, 512MB page cache on ARM64 when the base
page size is 64KB can&#39;t be supported by xarray.  It leads to errors as the
following messages indicate when this sort of xarray entry is split.

WARNING: CPU: 34 PID: 7578 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128
Modules linked in: binfmt_misc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6   \
nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject        \
nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4  \
ip_set rfkill nf_tables nfnetlink vfat fat virtio_balloon drm fuse xfs  \
libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 sha1_ce virtio_net \
net_failover virtio_console virtio_blk failover dimlib virtio_mmio
CPU: 34 PID: 7578 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #9
Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : xas_split_alloc+0xf8/0x128
lr : split_huge_page_to_list_to_order+0x1c4/0x720
sp : ffff8000882af5f0
x29: ffff8000882af5f0 x28: ffff8000882af650 x27: ffff8000882af768
x26: 0000000000000cc0 x25: 000000000000000d x24: ffff00010625b858
x23: ffff8000882af650 x22: ffffffdfc0900000 x21: 0000000000000000
x20: 0000000000000000 x19: ffffffdfc0900000 x18: 0000000000000000
x17: 0000000000000000 x16: 0000018000000000 x15: 52f8004000000000
x14: 0000e00000000000 x13: 0000000000002000 x12: 0000000000000020
x11: 52f8000000000000 x10: 52f8e1c0ffff6000 x9 : ffffbeb9619a681c
x8 : 0000000000000003 x7 : 0000000000000000 x6 : ffff00010b02ddb0
x5 : ffffbeb96395e378 x4 : 0000000000000000 x3 : 0000000000000cc0
x2 : 000000000000000d x1 : 000000000000000c x0 : 0000000000000000
Call trace:
 xas_split_alloc+0xf8/0x128
 split_huge_page_to_list_to_order+0x1c4/0x720
 truncate_inode_partial_folio+0xdc/0x160
 shmem_undo_range+0x2bc/0x6a8
 shmem_fallocate+0x134/0x430
 vfs_fallocate+0x124/0x2e8
 ksys_fallocate+0x4c/0xa0
 __arm64_sys_fallocate+0x24/0x38
 invoke_syscall.constprop.0+0x7c/0xd8
 do_el0_svc+0xb4/0xd0
 el0_svc+0x44/0x1d8
 el0t_64_sync_handler+0x134/0x150
 el0t_64_sync+0x17c/0x180

Fix it by disabling PMD-sized page cache when HPAGE_PMD_ORDER is larger
than MAX_PAGECACHE_ORDER.  As Matthew Wilcox pointed, the page cache in a
shmem file isn&#39;t represented by a multi-index entry and doesn&#39;t have this
limitation when the xarry entry is split until commit 6b24ca4a1a8d (&#34;mm:
Use multi-index entries in the page cache&#34;).

The Linux kernel CVE team has assigned CVE-2024-42241 to this issue.

openEuler评分:(评分和向量)
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

受影响版本排查(受影响/不受影响):
1.openEuler-20.03-LTS-SP4:不受影响
2.openEuler-22.03-LTS-SP1:不受影响
3.openEuler-22.03-LTS-SP3:不受影响
4.openEuler-22.03-LTS-SP4:不受影响
5.master(6.1.0):不受影响
6.openEuler-24.03-LTS:不受影响
7.openEuler-24.03-LTS-Next:不受影响

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP4:否
2.openEuler-22.03-LTS-SP1:否
3.openEuler-22.03-LTS-SP3:否
4.master(6.1.0):否
5.openEuler-24.03-LTS:否
6.openEuler-24.03-LTS-Next:否
7.openEuler-22.03-LTS-SP4:否

@ 经过 cve-manager 解析, 已分析的内容如下表所示:
| 状态  | 需分析 | 内容 |
|:--:|:--:|---------|
|已分析|1.影响性分析说明|In the Linux kernel, the following vulnerability has been resolved:mm/shmem: disable PMD-sized page cache if neededFor shmem files, it&#39;s possible that PMD-sized page cache can&#39;t besupported by xarray.  For example, 512MB page cache on ARM64 when the basepage size is 64KB can&#39;t be supported by xarray.  It leads to errors as thefollowing messages indicate when this sort of xarray entry is split.WARNING: CPU: 34 PID: 7578 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128Modules linked in: binfmt_misc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6   \nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject        \nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4  \ip_set rfkill nf_tables nfnetlink vfat fat virtio_balloon drm fuse xfs  \libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 sha1_ce virtio_net \net_failover virtio_console virtio_blk failover dimlib virtio_mmioCPU: 34 PID: 7578 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #9Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)pc : xas_split_alloc+0xf8/0x128lr : split_huge_page_to_list_to_order+0x1c4/0x720sp : ffff8000882af5f0x29: ffff8000882af5f0 x28: ffff8000882af650 x27: ffff8000882af768x26: 0000000000000cc0 x25: 000000000000000d x24: ffff00010625b858x23: ffff8000882af650 x22: ffffffdfc0900000 x21: 0000000000000000x20: 0000000000000000 x19: ffffffdfc0900000 x18: 0000000000000000x17: 0000000000000000 x16: 0000018000000000 x15: 52f8004000000000x14: 0000e00000000000 x13: 0000000000002000 x12: 0000000000000020x11: 52f8000000000000 x10: 52f8e1c0ffff6000 x9 : ffffbeb9619a681cx8 : 0000000000000003 x7 : 0000000000000000 x6 : ffff00010b02ddb0x5 : ffffbeb96395e378 x4 : 0000000000000000 x3 : 0000000000000cc0x2 : 000000000000000d x1 : 000000000000000c x0 : 0000000000000000Call trace: xas_split_alloc+0xf8/0x128 split_huge_page_to_list_to_order+0x1c4/0x720 truncate_inode_partial_folio+0xdc/0x160 shmem_undo_range+0x2bc/0x6a8 shmem_fallocate+0x134/0x430 vfs_fallocate+0x124/0x2e8 ksys_fallocate+0x4c/0xa0 __arm64_sys_fallocate+0x24/0x38 invoke_syscall.constprop.0+0x7c/0xd8 do_el0_svc+0xb4/0xd0 el0_svc+0x44/0x1d8 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x17c/0x180Fix it by disabling PMD-sized page cache when HPAGE_PMD_ORDER is largerthan MAX_PAGECACHE_ORDER.  As Matthew Wilcox pointed, the page cache in ashmem file isn&#39;t represented by a multi-index entry and doesn&#39;t have thislimitation when the xarry entry is split until commit 6b24ca4a1a8d (&#34;mm:Use multi-index entries in the page cache&#34;).The Linux kernel CVE team has assigned CVE-2024-42241 to this issue.|
|已分析|2.openEulerScore|5.5|
|已分析|3.openEulerVector|AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H|
|已分析|4.受影响版本排查|openEuler-20.03-LTS-SP4:不受影响,openEuler-22.03-LTS-SP1:不受影响,openEuler-22.03-LTS-SP3:不受影响,openEuler-22.03-LTS-SP4:不受影响,master:不受影响,openEuler-24.03-LTS:不受影响,openEuler-24.03-LTS-Next:不受影响|
|已分析|5.修复是否涉及abi变化|openEuler-20.03-LTS-SP4:否,openEuler-22.03-LTS-SP1:否,openEuler-22.03-LTS-SP3:否,master:否,openEuler-24.03-LTS:否,openEuler-24.03-LTS-Next:否,openEuler-22.03-LTS-SP4:否|

**请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.**