CVE-2023-52939

Summary

In the Linux kernel, the following vulnerability has been resolved:

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

As commit 18365225f044 ("hwpoison, memcg: forcibly uncharge LRU pages"), hwpoison will forcibly uncharg a LRU hwpoisoned page, the folio_memcg could be NULl, then, mem_cgroup_track_foreign_dirty_slowpath() could occurs a NULL pointer dereference, let's do not record the foreign writebacks for folio memcg is null in mem_cgroup_track_foreign_dirty() to fix it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux97b27821b4854ca744946dae32a3f2fd55bcd5bc < b79ba5953f6fdc5559389ad415620bffc24f024baffected
LinuxLinux97b27821b4854ca744946dae32a3f2fd55bcd5bc < ac86f547ca1002aec2ef66b9e64d03f45bbbfbb9affected
LinuxLinux5.4affected
LinuxLinux0 < 5.4unaffected
LinuxLinux6.1.11 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References