Riskcovery

CVE-2023-52940

mm: multi-gen LRU: fix crash during cgroup migration

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: multi-gen LRU: fix crash during cgroup migration

lru_gen_migrate_mm() assumes lru_gen_add_mm() runs prior to itself. This isn't true for the following scenario:

CPU 1 CPU 2

clone() cgroup_can_fork() cgroup_procs_write() cgroup_post_fork() task_lock() lru_gen_migrate_mm() task_unlock() task_lock() lru_gen_add_mm() task_unlock()

And when the above happens, kernel crashes because of linked list corruption (mm_struct->lru_gen.list).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bd74fdaea146029e4fa12c6de89adbe0779348a9 to before 04448022311cebd30969d3aebdde765f1258b360Affected
  • bd74fdaea146029e4fa12c6de89adbe0779348a9 to before de08eaa6156405f2e9369f06ba5afae0e4ab3b62Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.11 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.