Back to search
CVE-2024-43888
Published: Aug 26, 2024
Modified: May 11, 2026
PUBLISHED
Description
In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or cgroup_mutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found by code inspection. [[email protected]: only grab rcu lock when necessary, per Vlastimil]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 0a97c01cd20bb96359d8c9dedad92a061ed34e0b - < 4589f77c18dd98b65f45617b6d1e95313cf6fcabaffected 0a97c01cd20bb96359d8c9dedad92a061ed34e0b - < 5161b48712dcd08ec427c450399d4d1483e21dea |
Linux | Linux | affected 6.8unaffected 0 - < 6.8unaffected 6.10.5 - <= 6.10.*unaffected 6.11 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now