CVE-2024-41033

cachestat: do not flush stats in recency check

published July 29, 2024

CVSS
—
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cachestat: do not flush stats in recency check

syzbot detects that cachestat() is flushing stats, which can sleep, in its

RCU read section (see [1]). This is done in the workingset_test_recent()

step (which checks if the folio's eviction is recent).

Move the stat flushing step to before the RCU read section of cachestat,

and skip stat flushing during the recency check.

[1]: https://lore.kernel.org/cgroups/[email protected]/

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Published
2024-07-29T14:31Z
EPSS history
Timeline
  • 29 JUL 14:31Z
    cachestat: do not flush stats in recency check
    cvelistv5