CVE-2024-41033: cachestat: do not flush stats in recency check
In the Linux kernel, the following vulnerability has been resolved:
cachestat: do not flush stats in recency check
syzbot detects that cachestat() is flushing stats, which can sleep, in its RCU read section (see [1]). This is done in the workingsettestrecent() step (which checks if the folio's eviction is recent).
Move the stat flushing step to before the RCU read section of cachestat, and skip stat flushing during the recency check.
[1]: https://lore.kernel.org/cgroups/000000000000f71227061bdf97e0@google.com/
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41033?
CVE-2024-41033 has a moderate severity rating due to the potential for disruptions in the Linux kernel's cache statistics.
How do I fix CVE-2024-41033?
To fix CVE-2024-41033, update your Linux kernel to one of the fixed versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
Which versions of Linux are affected by CVE-2024-41033?
CVE-2024-41033 affects specific versions of the Linux kernel before the mentioned fixed versions.
What is the impact of CVE-2024-41033?
The impact of CVE-2024-41033 can lead to inefficiencies in memory management within the Linux kernel.
Is there a workaround for CVE-2024-41033 before applying the patch?
There are no recommended workarounds for CVE-2024-41033, and it is advised to apply the kernel updates as soon as possible.