CVE-2024-43888: mm: list_lru: fix UAF for memory cgroup
In the Linux kernel, the following vulnerability has been resolved:
mm: listlru: fix UAF for memory cgroup
The memcgroupfromslabobj() is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock.
Found by code inspection.
[songmuchun: only grab rcu lock when necessary, per Vlastimil] Link: https://lkml.kernel.org/r/20240801024603.1865-1-songmuchun@bytedance.com
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mm: listlru: fix UAF for memory cgroup
The memcgroupfromslabobj() is supposed to be called under rcu lock or cgroupmutex or others which could prevent returned memcg from being freed. Fix it by adding missing rcu read lock.
Found by code inspection.
[songmuchun@bytedance.com: only grab rcu lock when necessary, per Vlastimil]
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
Patch the Linux kernel code path for mm/list_lru by adding the missing RCU read lock around calls to mem_cgroup_from_slab_obj(), so that the returned memcg cannot be freed concurrently (as required: mem_cgroup_from_slab_obj() must be called under rcu lock or cgroup_mutex or other mechanisms that prevent memcg freeing).
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43888?
CVE-2024-43888 has been classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-43888?
To fix CVE-2024-43888, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-43888?
CVE-2024-43888 affects Linux kernel versions from 6.8 up to 6.10.5 and specific release candidates 6.11-rc1 and 6.11-rc2.
What type of vulnerability is CVE-2024-43888?
CVE-2024-43888 is a use-after-free (UAF) vulnerability related to the memory control group management in the Linux kernel.
Is CVE-2024-43888 exploitable remotely?
CVE-2024-43888 is not categorized as a remote code execution vulnerability, but it could potentially be exploited locally if conditions allow.