extractusertosg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for trygrab_page.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40791.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "6.4.12" } ] } ]