CVE-2023-52940
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-52940
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52940.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-52940
- Downstream
- Published
- 2025-03-27T16:37:18Z
- Modified
- 2025-10-21T15:07:30.804125Z
- Summary
- mm: multi-gen LRU: fix crash during cgroup migration
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mm: multi-gen LRU: fix crash during cgroup migration
lrugenmigratemm() assumes lrugenaddmm() runs prior to itself. This isn't true for the following scenario:
CPU 1 CPU 2clone() cgroupcanfork() cgroupprocswrite() cgrouppostfork() tasklock() lrugenmigratemm() taskunlock() tasklock() lrugenaddmm() taskunlock()
And when the above happens, kernel crashes because of linked list corruption (mmstruct->lrugen.list).
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbd74fdaea146029e4fa12c6de89adbe0779348a9Fixed04448022311cebd30969d3aebdde765f1258b360
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbd74fdaea146029e4fa12c6de89adbe0779348a9Fixedde08eaa6156405f2e9369f06ba5afae0e4ab3b62
Affected versions
v6.*
v6.0
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.1.9
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04448022311cebd30969d3aebdde765f1258b360",
"target": {
"file": "mm/vmscan.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-52940-85fee606",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"121006313525359513121572838991695926313",
"262768049021246703576999640325638571562",
"210866022903847097983005574344006291461",
"118330401920928701026263605040755510049",
"121522977608741433463707268895471964210",
"324759242496940587366248604549556661088",
"313593788656260653338970365869134717336",
"276562049445123484520781788738006779714",
"20380443218771843440247736686884312903"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de08eaa6156405f2e9369f06ba5afae0e4ab3b62",
"target": {
"file": "mm/vmscan.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-52940-8b149a34",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"121006313525359513121572838991695926313",
"262768049021246703576999640325638571562",
"210866022903847097983005574344006291461",
"118330401920928701026263605040755510049",
"121522977608741433463707268895471964210",
"324759242496940587366248604549556661088",
"313593788656260653338970365869134717336",
"276562049445123484520781788738006779714",
"20380443218771843440247736686884312903"
]
}
}
]