CVE-2024-53136CWE-362

CVE-2024-53136

High · published December 4, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as

suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over

NFS.

As Hugh commented, "added just to silence a syzbot sanitizer splat: added

where there has never been any practical problem".

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-12-04T20:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.323, < 4.19.3254.19.325
linux/linux_kernel≥ 5.4.285, < 5.55.5
linux/linux_kernel≥ 5.10.229, < 5.115.11
linux/linux_kernel≥ 5.15.171, < 5.165.16
linux/linux_kernel≥ 6.1.116, < 6.1.1196.1.119
linux/linux_kernel≥ 6.6.60, < 6.6.636.6.63
linux/linux_kernel≥ 6.11.7, < 6.11.106.11.10
References (10)
EPSS history
Timeline
  • 04 DEC 14:20Z
    mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    cvelistv5