CVE-2024-41033

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41033
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41033.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41033
Downstream
Published
2024-07-29T14:31:48.256Z
Modified
2025-11-28T02:34:53.216985Z
Summary
cachestat: do not flush stats in recency check
Details

In the Linux kernel, the following vulnerability has been resolved:

cachestat: do not flush stats in recency check

syzbot detects that cachestat() is flushing stats, which can sleep, in its RCU read section (see [1]). This is done in the workingsettestrecent() step (which checks if the folio's eviction is recent).

Move the stat flushing step to before the RCU read section of cachestat, and skip stat flushing during the recency check.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41033.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
68849411ce9eb55d00cef48504dcb35baca4b37e
Fixed
e2f7c76758be16f1dc32c5a82270d4f6649eedab
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b006847222623ac3cda8589d15379eac86a2bcb7
Fixed
1d1ba14e00d290b1ed616ed78c8c49bf897ce390
Fixed
5a4d8944d6b1e1aaaa83ea42c116b520b4ed0394

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.9.10