CVE-2023-52940

Description

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lru_gen_migrate_mm() assumes lru_gen_add_mm() runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone() cgroup_can_fork() cgroup_procs_write() cgroup_post_fork() task_lock() lru_gen_migrate_mm() task_unlock() task_lock() lru_gen_add_mm() task_unlock() And when the above happens, kernel crashes because of linked list corruption (mm_struct->lru_gen.list).

Reserved 2024-08-21 | Published 2025-03-27 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

bd74fdaea146029e4fa12c6de89adbe0779348a9 before 04448022311cebd30969d3aebdde765f1258b360
affected

bd74fdaea146029e4fa12c6de89adbe0779348a9 before de08eaa6156405f2e9369f06ba5afae0e4ab3b62
affected

Default status
affected

6.1
affected

Any version before 6.1
unaffected

6.1.11
unaffected

6.2
unaffected

References

git.kernel.org/...c/04448022311cebd30969d3aebdde765f1258b360

git.kernel.org/...c/de08eaa6156405f2e9369f06ba5afae0e4ab3b62

cve.org (CVE-2023-52940)

nvd.nist.gov (CVE-2023-52940)

Download JSON