CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching
In the Linux kernel, the following vulnerability has been resolved:
ubi: fastmap: Fix duplicate slab cache names while attaching
Since commit 4c39529663b9 ("slab: Warn on duplicate cache names when DEBUGVM=y"), the duplicate slab cache names can be detected and a kernel WARNING is thrown out. In UBI fast attaching process, allocai() could be invoked twice with the same slab cache name 'ubiaebslabcache', which will trigger following warning messages: kmemcache of name 'ubiaebslabcache' already exists WARNING: CPU: 0 PID: 7519 at mm/slabcommon.c:107 kmemcachecreateargs+0x100/0x5f0 Modules linked in: ubi(+) nandsim [last unloaded: nandsim] CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2 RIP: 0010:kmemcachecreateargs+0x100/0x5f0 Call Trace: kmemcachecreateargs+0x100/0x5f0 allocai+0x295/0x3f0 [ubi] ubiattach+0x3c3/0xcc0 [ubi] ubiattachmtddev+0x17cf/0x3fa0 [ubi] ubiinit+0x3fb/0x800 [ubi] doinitmodule+0x265/0x7d0 x64sysfinitmodule+0x7a/0xc0
The problem could be easily reproduced by loading UBI device by fastmap with CONFIGDEBUGVM=y. Fix it by using different slab names for allocai() callers.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53172?
The severity of CVE-2024-53172 has not been explicitly rated, but it addresses a vulnerability related to duplicate slab cache names which could lead to kernel warnings.
How do I fix CVE-2024-53172?
To fix CVE-2024-53172, update your Linux kernel to versions 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1, or ensure you are not using versions earlier than 5.10.226-1.
Which versions of the Linux kernel are affected by CVE-2024-53172?
CVE-2024-53172 affects all Linux kernel versions up to 5.10.226-1 and those before the latest patches.
What type of vulnerability is CVE-2024-53172?
CVE-2024-53172 is a kernel vulnerability specifically related to memory management concerning slab cache names.
Is there any potential risk associated with CVE-2024-53172?
Yes, the risk includes kernel warnings that may affect system stability and performance due to the handling of duplicate slab cache names.