CVE-2023-52940

Source
https://cve.org/CVERecord?id=CVE-2023-52940
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52940.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52940
Downstream
Published
2025-03-27T16:37:18.691Z
Modified
2026-03-20T12:32:53.269271Z
Summary
mm: multi-gen LRU: fix crash during cgroup migration
Details

In the Linux kernel, the following vulnerability has been resolved:

mm: multi-gen LRU: fix crash during cgroup migration

lrugenmigratemm() assumes lrugenaddmm() runs prior to itself. This isn't true for the following scenario:

CPU 1                         CPU 2

clone() cgroupcanfork() cgroupprocswrite() cgrouppostfork() tasklock() lrugenmigratemm() taskunlock() tasklock() lrugenaddmm() taskunlock()

And when the above happens, kernel crashes because of linked list corruption (mmstruct->lrugen.list).

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52940.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bd74fdaea146029e4fa12c6de89adbe0779348a9
Fixed
04448022311cebd30969d3aebdde765f1258b360
Fixed
de08eaa6156405f2e9369f06ba5afae0e4ab3b62

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52940.json"