extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40791.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "6.4.12"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "f443fd5af5dbd531f880d3645d5dd36976cf087f"
}
],
"source": "REFERENCES_COMMIT"
}
]
}