CVE-2023-52940

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm: multi-gen LRU: fix crash during cgroup migration<br /> <br /> lru_gen_migrate_mm() assumes lru_gen_add_mm() runs prior to itself. This<br /> isn&amp;#39;t true for the following scenario:<br /> <br /> CPU 1 CPU 2<br /> <br /> clone()<br /> cgroup_can_fork()<br /> cgroup_procs_write()<br /> cgroup_post_fork()<br /> task_lock()<br /> lru_gen_migrate_mm()<br /> task_unlock()<br /> task_lock()<br /> lru_gen_add_mm()<br /> task_unlock()<br /> <br /> And when the above happens, kernel crashes because of linked list<br /> corruption (mm_struct-&gt;lru_gen.list).

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1 (including) 6.1.11 (excluding)
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*