Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41033
HistoryJul 29, 2024 - 2:31 p.m.

CVE-2024-41033 cachestat: do not flush stats in recency check

2024-07-2914:31:48
Linux
github.com
1
linux kernel
vulnerability
cachestat
flush stats
recency check
rcu
workingset_test_recent

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

cachestat: do not flush stats in recency check

syzbot detects that cachestat() is flushing stats, which can sleep, in its
RCU read section (see 1). This is done in the workingset_test_recent()
step (which checks if the folio’s eviction is recent).

Move the stat flushing step to before the RCU read section of cachestat,
and skip stat flushing during the recency check.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-41033