CVE-2024-41033

cachestat: do not flush stats in recency check

State
Published
Severity
Not scored
Published
Jul 29, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cachestat: do not flush stats in recency check

syzbot detects that cachestat() is flushing stats, which can sleep, in its RCU read section (see [1]). This is done in the workingset_test_recent() step (which checks if the folio's eviction is recent).

Move the stat flushing step to before the RCU read section of cachestat, and skip stat flushing during the recency check.

[1]: https://lore.kernel.org/cgroups/000000000000f71227061bdf97e0@google.com/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 68849411ce9eb55d00cef48504dcb35baca4b37e to before e2f7c76758be16f1dc32c5a82270d4f6649eedabAffected
  • b006847222623ac3cda8589d15379eac86a2bcb7 to before 1d1ba14e00d290b1ed616ed78c8c49bf897ce390Affected
  • b006847222623ac3cda8589d15379eac86a2bcb7 to before 5a4d8944d6b1e1aaaa83ea42c116b520b4ed0394Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.9.10 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.