Vulnerability Details CVE-2024-53136
In the Linux kernel, the following vulnerability has been resolved:
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as
suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over
NFS.
As Hugh commented, "added just to silence a syzbot sanitizer splat: added
where there has never been any practical problem".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.7%
CVSS Severity
CVSS v3 Score 4.7
References
- https://git.kernel.org/stable/c/36b537e8f302f670c7cf35d88a3a294443e32d52
- https://git.kernel.org/stable/c/57cc8d253099d1b8627f0fb487ee011d9158ccc9
- https://git.kernel.org/stable/c/5874c1150e77296565ad6e495ef41fbf87570d14
- https://git.kernel.org/stable/c/64e67e8694252c1bf01b802ee911be3fee62c36b
- https://git.kernel.org/stable/c/901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e
- https://git.kernel.org/stable/c/a3c65022d89d5baa2cea8e87a6de983ea305f14c
- https://git.kernel.org/stable/c/d1aa0c04294e29883d65eac6c2f72fe95cc7c049
- https://git.kernel.org/stable/c/d3f9d88c2c03b2646ace336236adca19f7697bd3
Products affected by CVE-2024-53136
-
cpe:2.3:o:linux:linux_kernel:4.19.323
-
cpe:2.3:o:linux:linux_kernel:4.19.324
-
cpe:2.3:o:linux:linux_kernel:5.10.229
-
cpe:2.3:o:linux:linux_kernel:5.10.230
-
cpe:2.3:o:linux:linux_kernel:5.10.231
-
cpe:2.3:o:linux:linux_kernel:5.10.232
-
cpe:2.3:o:linux:linux_kernel:5.10.233
-
cpe:2.3:o:linux:linux_kernel:5.10.234
-
cpe:2.3:o:linux:linux_kernel:5.10.235
-
cpe:2.3:o:linux:linux_kernel:5.10.236
-
cpe:2.3:o:linux:linux_kernel:5.10.237
-
cpe:2.3:o:linux:linux_kernel:5.10.238
-
cpe:2.3:o:linux:linux_kernel:5.10.239
-
cpe:2.3:o:linux:linux_kernel:5.10.240
-
cpe:2.3:o:linux:linux_kernel:5.10.241
-
cpe:2.3:o:linux:linux_kernel:5.10.242
-
cpe:2.3:o:linux:linux_kernel:5.10.244
-
cpe:2.3:o:linux:linux_kernel:5.15.171
-
cpe:2.3:o:linux:linux_kernel:5.15.172
-
cpe:2.3:o:linux:linux_kernel:5.15.173
-
cpe:2.3:o:linux:linux_kernel:5.15.174
-
cpe:2.3:o:linux:linux_kernel:5.15.175
-
cpe:2.3:o:linux:linux_kernel:5.15.176
-
cpe:2.3:o:linux:linux_kernel:5.15.177
-
cpe:2.3:o:linux:linux_kernel:5.15.178
-
cpe:2.3:o:linux:linux_kernel:5.15.179
-
cpe:2.3:o:linux:linux_kernel:5.15.180
-
cpe:2.3:o:linux:linux_kernel:5.15.181
-
cpe:2.3:o:linux:linux_kernel:5.15.182
-
cpe:2.3:o:linux:linux_kernel:5.15.183
-
cpe:2.3:o:linux:linux_kernel:5.15.184
-
cpe:2.3:o:linux:linux_kernel:5.15.185
-
cpe:2.3:o:linux:linux_kernel:5.15.186
-
cpe:2.3:o:linux:linux_kernel:5.15.187
-
cpe:2.3:o:linux:linux_kernel:5.15.188
-
cpe:2.3:o:linux:linux_kernel:5.15.189
-
cpe:2.3:o:linux:linux_kernel:5.15.190
-
cpe:2.3:o:linux:linux_kernel:5.15.191
-
cpe:2.3:o:linux:linux_kernel:5.4.285
-
cpe:2.3:o:linux:linux_kernel:5.4.286
-
cpe:2.3:o:linux:linux_kernel:5.4.287
-
cpe:2.3:o:linux:linux_kernel:5.4.288
-
cpe:2.3:o:linux:linux_kernel:5.4.289
-
cpe:2.3:o:linux:linux_kernel:5.4.290
-
cpe:2.3:o:linux:linux_kernel:5.4.291
-
cpe:2.3:o:linux:linux_kernel:5.4.292
-
cpe:2.3:o:linux:linux_kernel:5.4.293
-
cpe:2.3:o:linux:linux_kernel:5.4.294
-
cpe:2.3:o:linux:linux_kernel:5.4.295
-
cpe:2.3:o:linux:linux_kernel:5.4.296
-
cpe:2.3:o:linux:linux_kernel:5.4.297
-
cpe:2.3:o:linux:linux_kernel:5.4.298
-
cpe:2.3:o:linux:linux_kernel:6.1.116
-
cpe:2.3:o:linux:linux_kernel:6.1.117
-
cpe:2.3:o:linux:linux_kernel:6.1.118
-
cpe:2.3:o:linux:linux_kernel:6.11.7
-
cpe:2.3:o:linux:linux_kernel:6.11.8
-
cpe:2.3:o:linux:linux_kernel:6.11.9
-
cpe:2.3:o:linux:linux_kernel:6.6.60
-
cpe:2.3:o:linux:linux_kernel:6.6.61
-
cpe:2.3:o:linux:linux_kernel:6.6.62