Description

In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or cgroup_mutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found by code inspection. [[email protected]: only grab rcu lock when necessary, per Vlastimil]

INFO

Published Date :

2024-08-26T10:10:40.890Z

Last Modified :

2025-05-04T09:28:36.636Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-43888 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-43888.

URL Resource
https://git.kernel.org/stable/c/4589f77c18dd98b65f45617b6d1e95313cf6fcab cve-icon cve-icon
https://git.kernel.org/stable/c/5161b48712dcd08ec427c450399d4d1483e21dea cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024082659-CVE-2024-43888-5beb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-43888 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-43888 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact