Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab->obj_exts always When memory allocation profiling is disabled at runtime or due to an error, shutdown_mem_profiling() is called: slab->obj_exts which previously allocated remains. It won't be cleared by unaccount_slab() because of mem_alloc_profiling_enabled() not true. It's incorrect, slab->obj_exts should always be cleaned up in unaccount_slab() to avoid following error: [...]BUG: Bad page state in process... .. [...]page dumped because: page still charged to cgroup [andriy.shevchenko@linux.intel.com: fold need_slab_obj_ext() into its only user]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 21c690a349baab895dc68ab70d291e1598d7109d before dab2a13059a475b6392550f882276e170fe2fcff; affected 21c690a349baab895dc68ab70d291e1598d7109d before 01db0e1a48345aa1937f3bdfc7c7108d03ebcf7e; affected 21c690a349baab895dc68ab70d291e1598d7109d before be8250786ca94952a19ce87f98ad9906448bc9ef |
| Linux / Linux | affected 6.10; unaffected 0 before 6.10; unaffected 6.12.28 through 6.12.*; unaffected 6.14.6 through 6.14.*; unaffected 6.15 through * |
CWE
No CWE identifiers supplied.