Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or cgroup_mutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock. Found by code inspection. [songmuchun@bytedance.com: only grab rcu lock when necessary, per Vlastimil]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0a97c01cd20bb96359d8c9dedad92a061ed34e0b before 4589f77c18dd98b65f45617b6d1e95313cf6fcab; affected 0a97c01cd20bb96359d8c9dedad92a061ed34e0b before 5161b48712dcd08ec427c450399d4d1483e21dea; affected 32d7120a499d475bc03e893c59611116279bcfb8; affected 6.6.160 before 6.7 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.10.5 through 6.10.*; unaffected 6.11 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/4589f77c18dd98b65f45617b6d1e95313cf6fcab
- https://git.kernel.org/stable/c/5161b48712dcd08ec427c450399d4d1483e21dea
ADP enrichment
No English description supplied.
No references supplied.