CVE-2024-43853: cgroup/cpuset: Prevent UAF in proc_cpuset_show()
cgroup/cpuset: Prevent UAF in proccpusetshow()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Apply the kernel fix for CVE described in the text: prevent a UAF in proc_cpuset_show() by using rcu_read_lock in proc_cpuset_show().
Linux kernel cgroup cpuset (/proc/cpuset) proc_cpuset_show locking = use rcu_read_lock
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43853?
CVE-2024-43853 is considered a high-severity vulnerability due to its potential for exposing system resources through use-after-free conditions.
How do I fix CVE-2024-43853?
To fix CVE-2024-43853, update the Linux kernel to the patched versions, specifically versions 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2024-43853?
CVE-2024-43853 affects Linux kernel versions ranging from 4.6 to 6.1.103, 6.2 to 6.6.44, and 6.7 to 6.10.3.
Is CVE-2024-43853 exploitable remotely?
Yes, CVE-2024-43853 could be exploitable remotely if an attacker can read the /proc/cpuset file under certain conditions.
What components of the Linux kernel are impacted by CVE-2024-43853?
CVE-2024-43853 affects the cgroup and cpuset components of the Linux kernel.