Bug 2297533 (CVE-2024-40949)
| Summary: | CVE-2024-40949 kernel: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | dfreiber, drow, jburrell, vkumar |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | kernel 6.9.7, kernel 6.10-rc5 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in "mm: shmem" in the Linux Kernel. This issue was resolved by fixing incorrect LRU vector handling when replacing shmem folios. The issue occurred because the replacement cleared the old folio's memory control group (memcg) data, causing incorrect LRU vector retrieval and potential system crashes due to wrong LRU locks and inaccurate statistics.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2024-07-12 13:38:41 UTC
|