GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-40917 (GCVE-0-2024-40917)

Vulnerability from cvelistv5 – Published: 2024-07-12 12:25 – Updated: 2026-05-23 15:50
VLAI
Title
memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
Summary
In the Linux kernel, the following vulnerability has been resolved: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES On an (old) x86 system with SRAT just covering space above 4Gb: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug the commit referenced below leads to this NUMA configuration no longer being refused by a CONFIG_NUMA=y kernel (previously NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used. No NUMA configuration found Faking a node at [mem 0x0000000000000000-0x000000027fffffff] was seen in the log directly after the message quoted above), because of memblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This in turn led to memblock_alloc_range_nid()'s warning about MAX_NUMNODES triggering, followed by a NULL deref in memmap_init() when trying to access node 64's (NODE_SHIFT=6) node data. To compensate said change, make memblock_set_node() warn on and adjust a passed in value of MAX_NUMNODES, just like various other functions already do.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 17:05 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 6fdc770506eb8379bf68a49d4e193c8364ac64e0 , < 4ddb7f966f3d06fcf1ba5ee298af6714b593584b (git)
Affected: ff6c3d81f2e86b63a3a530683f89ef393882782a , < 22f742b8f738918f683198a18ec3c691acda14c4 (git)
Affected: ff6c3d81f2e86b63a3a530683f89ef393882782a , < e0eec24e2e199873f43df99ec39773ad3af2bff7 (git)
Affected: 6.6.70 , < 6.6.72 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.8
Unaffected: 0 , < 6.8 (semver)
Unaffected: 6.6.72 , ≤ 6.6.* (semver)
Unaffected: 6.9.6 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:39:55.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-40917",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:05:43.202207Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:04.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/memblock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4ddb7f966f3d06fcf1ba5ee298af6714b593584b",
              "status": "affected",
              "version": "6fdc770506eb8379bf68a49d4e193c8364ac64e0",
              "versionType": "git"
            },
            {
              "lessThan": "22f742b8f738918f683198a18ec3c691acda14c4",
              "status": "affected",
              "version": "ff6c3d81f2e86b63a3a530683f89ef393882782a",
              "versionType": "git"
            },
            {
              "lessThan": "e0eec24e2e199873f43df99ec39773ad3af2bff7",
              "status": "affected",
              "version": "ff6c3d81f2e86b63a3a530683f89ef393882782a",
              "versionType": "git"
            },
            {
              "lessThan": "6.6.72",
              "status": "affected",
              "version": "6.6.70",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/memblock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.72",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.72",
                  "versionStartIncluding": "6.6.70",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.6",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemblock: make memblock_set_node() also warn about use of MAX_NUMNODES\n\nOn an (old) x86 system with SRAT just covering space above 4Gb:\n\n    ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug\n\nthe commit referenced below leads to this NUMA configuration no longer\nbeing refused by a CONFIG_NUMA=y kernel (previously\n\n    NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.\n    No NUMA configuration found\n    Faking a node at [mem 0x0000000000000000-0x000000027fffffff]\n\nwas seen in the log directly after the message quoted above), because of\nmemblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This\nin turn led to memblock_alloc_range_nid()\u0027s warning about MAX_NUMNODES\ntriggering, followed by a NULL deref in memmap_init() when trying to\naccess node 64\u0027s (NODE_SHIFT=6) node data.\n\nTo compensate said change, make memblock_set_node() warn on and adjust\na passed in value of MAX_NUMNODES, just like various other functions\nalready do."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:50:59.080Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4ddb7f966f3d06fcf1ba5ee298af6714b593584b"
        },
        {
          "url": "https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7"
        }
      ],
      "title": "memblock: make memblock_set_node() also warn about use of MAX_NUMNODES",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-40917",
    "datePublished": "2024-07-12T12:25:00.175Z",
    "dateReserved": "2024-07-12T12:17:45.581Z",
    "dateUpdated": "2026-05-23T15:50:59.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-40917",
      "date": "2026-09-16",
      "epss": "0.00267",
      "percentile": "0.18899"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmemblock: make memblock_set_node() also warn about use of MAX_NUMNODES\\n\\nOn an (old) x86 system with SRAT just covering space above 4Gb:\\n\\n    ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug\\n\\nthe commit referenced below leads to this NUMA configuration no longer\\nbeing refused by a CONFIG_NUMA=y kernel (previously\\n\\n    NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.\\n    No NUMA configuration found\\n    Faking a node at [mem 0x0000000000000000-0x000000027fffffff]\\n\\nwas seen in the log directly after the message quoted above), because of\\nmemblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This\\nin turn led to memblock_alloc_range_nid()\u0027s warning about MAX_NUMNODES\\ntriggering, followed by a NULL deref in memmap_init() when trying to\\naccess node 64\u0027s (NODE_SHIFT=6) node data.\\n\\nTo compensate said change, make memblock_set_node() warn on and adjust\\na passed in value of MAX_NUMNODES, just like various other functions\\nalready do.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: memblock: make memblock_set_node() tambi\\u00e9n advierte sobre el uso de MAX_NUMNODES En un sistema x86 (antiguo) con SRAT que solo cubre espacio superior a 4 Gb: ACPI: SRAT: Nodo 0 PXM 0 [mem 0x100000000 -0xfffffffff] hotplug, El commit a la que se hace referencia a continuaci\\u00f3n hace que esta configuraci\\u00f3n NUMA ya no sea rechazada por un kernel CONFIG_NUMA=y (anteriormente NUMA: los nodos solo cubren 6144 MB de su RAM e820 de 8185 MB. No se usa. No se encontr\\u00f3 ninguna configuraci\\u00f3n NUMA Falsificar un nodo en [mem 0x0000000000000000-0x000000027fffffff] se vio en el registro directamente despu\\u00e9s del mensaje citado anteriormente), debido a que memblock_validate_numa_coverage() verifica NUMA_NO_NODE (solamente). Esto a su vez llev\\u00f3 a la advertencia de memblock_alloc_range_nid() sobre la activaci\\u00f3n de MAX_NUMNODES, seguida de una deref NULL en memmap_init() al intentar acceder a los datos del nodo 64 (NODE_SHIFT=6). Para compensar dicho cambio, active memblock_set_node() y ajuste un valor pasado de MAX_NUMNODES, tal como lo hacen otras funciones.\"}]",
      "id": "CVE-2024-40917",
      "lastModified": "2024-11-21T09:31:51.300",
      "published": "2024-07-12T13:15:14.797",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-40917\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-12T13:15:14.797\",\"lastModified\":\"2026-06-17T07:46:51.983\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmemblock: make memblock_set_node() also warn about use of MAX_NUMNODES\\n\\nOn an (old) x86 system with SRAT just covering space above 4Gb:\\n\\n    ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug\\n\\nthe commit referenced below leads to this NUMA configuration no longer\\nbeing refused by a CONFIG_NUMA=y kernel (previously\\n\\n    NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.\\n    No NUMA configuration found\\n    Faking a node at [mem 0x0000000000000000-0x000000027fffffff]\\n\\nwas seen in the log directly after the message quoted above), because of\\nmemblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This\\nin turn led to memblock_alloc_range_nid()\u0027s warning about MAX_NUMNODES\\ntriggering, followed by a NULL deref in memmap_init() when trying to\\naccess node 64\u0027s (NODE_SHIFT=6) node data.\\n\\nTo compensate said change, make memblock_set_node() warn on and adjust\\na passed in value of MAX_NUMNODES, just like various other functions\\nalready do.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: memblock: make memblock_set_node() tambi\u00e9n advierte sobre el uso de MAX_NUMNODES En un sistema x86 (antiguo) con SRAT que solo cubre espacio superior a 4 Gb: ACPI: SRAT: Nodo 0 PXM 0 [mem 0x100000000 -0xfffffffff] hotplug, El commit a la que se hace referencia a continuaci\u00f3n hace que esta configuraci\u00f3n NUMA ya no sea rechazada por un kernel CONFIG_NUMA=y (anteriormente NUMA: los nodos solo cubren 6144 MB de su RAM e820 de 8185 MB. No se usa. No se encontr\u00f3 ninguna configuraci\u00f3n NUMA Falsificar un nodo en [mem 0x0000000000000000-0x000000027fffffff] se vio en el registro directamente despu\u00e9s del mensaje citado anteriormente), debido a que memblock_validate_numa_coverage() verifica NUMA_NO_NODE (solamente). Esto a su vez llev\u00f3 a la advertencia de memblock_alloc_range_nid() sobre la activaci\u00f3n de MAX_NUMNODES, seguida de una deref NULL en memmap_init() al intentar acceder a los datos del nodo 64 (NODE_SHIFT=6). Para compensar dicho cambio, active memblock_set_node() y ajuste un valor pasado de MAX_NUMNODES, tal como lo hacen otras funciones.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"mm/memblock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6fdc770506eb8379bf68a49d4e193c8364ac64e0\",\"lessThan\":\"4ddb7f966f3d06fcf1ba5ee298af6714b593584b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ff6c3d81f2e86b63a3a530683f89ef393882782a\",\"lessThan\":\"22f742b8f738918f683198a18ec3c691acda14c4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ff6c3d81f2e86b63a3a530683f89ef393882782a\",\"lessThan\":\"e0eec24e2e199873f43df99ec39773ad3af2bff7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.6.70\",\"lessThan\":\"6.6.72\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"mm/memblock.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.72\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.6\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T17:05:43.202207Z\",\"id\":\"CVE-2024-40917\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.70\",\"versionEndExcluding\":\"6.6.72\",\"matchCriteriaId\":\"7A0A03AA-EF87-415D-A7CE-711C31CB3BFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8\",\"versionEndExcluding\":\"6.9.6\",\"matchCriteriaId\":\"5A16B675-D12F-49F9-AB96-23E6074FF336\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"331C2F14-12C7-45D5-893D-8C52EE38EA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3173713D-909A-4DD3-9DD4-1E171EB057EE\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4ddb7f966f3d06fcf1ba5ee298af6714b593584b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T10:45:42+00:00",
      "cve": "CVE-2024-40917",
      "id": "CVE-2024-40917",
      "initial_release_date": "2024-07-12T00:00:00+00:00",
      "product_status:known_affected": "42",
      "product_status:known_not_affected": "156",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-40917.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T01:52:34Z",
      "cve": "CVE-2024-40917",
      "id": "CVE-2024-40917",
      "initial_release_date": "2024-07-16T02:34:53Z",
      "product_status:known_not_affected": "373",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-40917",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-40917.json",
      "version": "17"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T04:39:55.350Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-40917\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T17:05:43.202207Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:14.339Z\"}}], \"cna\": {\"title\": \"memblock: make memblock_set_node() also warn about use of MAX_NUMNODES\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6fdc770506eb8379bf68a49d4e193c8364ac64e0\", \"lessThan\": \"4ddb7f966f3d06fcf1ba5ee298af6714b593584b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ff6c3d81f2e86b63a3a530683f89ef393882782a\", \"lessThan\": \"22f742b8f738918f683198a18ec3c691acda14c4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ff6c3d81f2e86b63a3a530683f89ef393882782a\", \"lessThan\": \"e0eec24e2e199873f43df99ec39773ad3af2bff7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6.6.70\", \"lessThan\": \"6.6.72\", \"versionType\": \"semver\"}], \"programFiles\": [\"mm/memblock.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.8\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.8\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.72\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"mm/memblock.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/4ddb7f966f3d06fcf1ba5ee298af6714b593584b\"}, {\"url\": \"https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\"}, {\"url\": \"https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmemblock: make memblock_set_node() also warn about use of MAX_NUMNODES\\n\\nOn an (old) x86 system with SRAT just covering space above 4Gb:\\n\\n    ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug\\n\\nthe commit referenced below leads to this NUMA configuration no longer\\nbeing refused by a CONFIG_NUMA=y kernel (previously\\n\\n    NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.\\n    No NUMA configuration found\\n    Faking a node at [mem 0x0000000000000000-0x000000027fffffff]\\n\\nwas seen in the log directly after the message quoted above), because of\\nmemblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This\\nin turn led to memblock_alloc_range_nid()\u0027s warning about MAX_NUMNODES\\ntriggering, followed by a NULL deref in memmap_init() when trying to\\naccess node 64\u0027s (NODE_SHIFT=6) node data.\\n\\nTo compensate said change, make memblock_set_node() warn on and adjust\\na passed in value of MAX_NUMNODES, just like various other functions\\nalready do.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.72\", \"versionStartIncluding\": \"6.6.70\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.6\", \"versionStartIncluding\": \"6.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"6.8\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:50:59.080Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-40917\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:50:59.080Z\", \"dateReserved\": \"2024-07-12T12:17:45.581Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-12T12:25:00.175Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.