Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-53136— mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm/shmem模块中由于撤销先前的数据竞争修复导致的死锁问题。

CVSS 7.5 · High EPSS 0.42% · P35

Possible ATT&CK Techniques 1 AI

T1053.007 · Container Orchestration Job

Affected Version Matrix 15

VendorProduct Version RangeStatus
Linux Linux 9fb9703cd43ee20a6de8ccdef991677b7274cec0< 36b537e8f302f670c7cf35d88a3a294443e32d52 affected
7cc30ada84323be19395094d567579536e0d187e< a3c65022d89d5baa2cea8e87a6de983ea305f14c affected
bda1a99a0dd644f31a87d636ac624eeb975cb65a< 57cc8d253099d1b8627f0fb487ee011d9158ccc9 affected
3d9528484480e8f4979b3a347930ed383be99f89< d3f9d88c2c03b2646ace336236adca19f7697bd3 affected
82cae1e30bd940253593c2d4f16d88343d1358f4< 5874c1150e77296565ad6e495ef41fbf87570d14 affected
edd1f905050686fdc4cfe233d818469fdf7d5ff8< 64e67e8694252c1bf01b802ee911be3fee62c36b affected
ffd56612566bc23877c8f45def2801f3324a222a< 901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e affected
d949d1d14fa281ace388b1de978e8f2cd52875cf< d1aa0c04294e29883d65eac6c2f72fe95cc7c049 affected
… +7 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-53136

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mm/shmem模块中由于撤销先前的数据竞争修复导致的死锁问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 9fb9703cd43ee20a6de8ccdef991677b7274cec0 ~ 36b537e8f302f670c7cf35d88a3a294443e32d52 -
Linux Linux 4.19.323 ~ 4.19.325 -

II. Public POCs for CVE-2024-53136

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-53136

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-53136 (8)

Same Patch Batch · Linux · 2024-12-04 · 16 CVEs total

CVE-2024-53138 9.8 CRITICAL net/mlx5e: kTLS, Fix incorrect page refcounting
CVE-2024-53135 8.8 HIGH KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
CVE-2024-53125 7.8 HIGH bpf: sync_linked_regs() must preserve subreg_def
CVE-2024-53127 7.8 HIGH Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
CVE-2024-53133 7.8 HIGH drm/amd/display: Handle dml allocation failure to avoid crash
CVE-2024-53139 7.8 HIGH sctp: fix possible UAF in sctp_v6_available()
CVE-2024-53140 7.8 HIGH netlink: terminate outstanding dump on socket close
CVE-2024-53126 7.1 HIGH vdpa: solidrun: Fix UB bug with devres
CVE-2024-53128 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
CVE-2024-53129 drm/rockchip: vop: Fix a dereferenced before check warning
CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
CVE-2024-53131 nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
CVE-2024-53132 drm/xe/oa: Fix "Missing outer runtime PM protection" warning
CVE-2024-53134 pmdomain: imx93-blk-ctrl: correct remove path
CVE-2024-53137 ARM: fix cacheflush with PAN

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-53136

No comments yet

Leave a comment