CVE-2022-48944 sched: Fix yet more sched_fork() races

In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more schedfork races Where commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue...

CVE-2022-48944

The CVE-2022-48944 issue is a Linux kernel race in sched/fork() related to how new tasks are exposed via pidhash and runqueue handling. The description cites prior fixes that fixed a fork race vs cgroup (commit 4ef0c5c6b5ba) and a subsequent change that effectively reverted that, aiming to fix th...

CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

SUSE CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

SUSE CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

AZL-48662 CVE-2024-43892 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

DEBIAN-CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

DEBIAN-CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

UBUNTU-CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

UBUNTU-CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

CVE-2024-43888 mm: list_lru: fix UAF for memory cgroup

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43888 mm: list_lru: fix UAF for memory cgroup

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43888 mm: list_lru: fix UAF for memory cgroup

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

CVE-2024-43888

CVE-2024-43888 pertains to the Linux kernel memory-control path. The advisory fixes a use-after-free in mm/list_lru for memory cgroups: mem_cgroup_from_slab_obj() must be called under RCU protection (rcu_read_lock) or with appropriate locks; without it, a memcg could be freed while still used. Th...

CVE-2024-43888

In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found b...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unprotected concurrent access when accessing memcgroupidr, leading to a potentially competitive condition...

kernel: perf: Fix list corruption in perf_cgroup_switch()

A vulnerability was found in the Linux kernel's performance monitoring subsystem, where the perfcgroupswitch function can lead to list corruption on the cgrpcpuctxlist. This occurs during the iteration of the list when an entry is removed using perfcgroupeventdisable, which does not safely handle...