CVE-2024-53136

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

State: Published
Severity: 7.5 High
Published: Dec 4, 2024
Updated: Aug 5, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS.

As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9fb9703cd43ee20a6de8ccdef991677b7274cec0 to before 36b537e8f302f670c7cf35d88a3a294443e32d52Affected 7cc30ada84323be19395094d567579536e0d187e to before a3c65022d89d5baa2cea8e87a6de983ea305f14cAffected bda1a99a0dd644f31a87d636ac624eeb975cb65a to before 57cc8d253099d1b8627f0fb487ee011d9158ccc9Affected 3d9528484480e8f4979b3a347930ed383be99f89 to before d3f9d88c2c03b2646ace336236adca19f7697bd3Affected 82cae1e30bd940253593c2d4f16d88343d1358f4 to before 5874c1150e77296565ad6e495ef41fbf87570d14Affected edd1f905050686fdc4cfe233d818469fdf7d5ff8 to before 64e67e8694252c1bf01b802ee911be3fee62c36bAffected ffd56612566bc23877c8f45def2801f3324a222a to before 901dc2ad7c3789fa87dc3956f6697c5d62d5cf7eAffected d949d1d14fa281ace388b1de978e8f2cd52875cf to before d1aa0c04294e29883d65eac6c2f72fe95cc7c049Affected
LinuxLinux	4.19.323 to before 4.19.325Affected 5.4.285 to before 5.4.287Affected 5.10.229 to before 5.10.231Affected 5.15.171 to before 5.15.174Affected 6.1.116 to before 6.1.119Affected 6.6.60 to before 6.6.63Affected 6.11.7 to before 6.11.10Affected

Product

Versions

LinuxLinux

9fb9703cd43ee20a6de8ccdef991677b7274cec0 to before 36b537e8f302f670c7cf35d88a3a294443e32d52Affected
7cc30ada84323be19395094d567579536e0d187e to before a3c65022d89d5baa2cea8e87a6de983ea305f14cAffected
bda1a99a0dd644f31a87d636ac624eeb975cb65a to before 57cc8d253099d1b8627f0fb487ee011d9158ccc9Affected
3d9528484480e8f4979b3a347930ed383be99f89 to before d3f9d88c2c03b2646ace336236adca19f7697bd3Affected
82cae1e30bd940253593c2d4f16d88343d1358f4 to before 5874c1150e77296565ad6e495ef41fbf87570d14Affected
edd1f905050686fdc4cfe233d818469fdf7d5ff8 to before 64e67e8694252c1bf01b802ee911be3fee62c36bAffected
ffd56612566bc23877c8f45def2801f3324a222a to before 901dc2ad7c3789fa87dc3956f6697c5d62d5cf7eAffected
d949d1d14fa281ace388b1de978e8f2cd52875cf to before d1aa0c04294e29883d65eac6c2f72fe95cc7c049Affected

LinuxLinux

4.19.323 to before 4.19.325Affected
5.4.285 to before 5.4.287Affected
5.10.229 to before 5.10.231Affected
5.15.171 to before 5.15.174Affected
6.1.116 to before 6.1.119Affected
6.6.60 to before 6.6.63Affected
6.11.7 to before 6.11.10Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.