CVE-2023-52489 — Race Condition in Linux
Severity
4.7MEDIUMNVD
OSV7.5OSV6.5
EPSS
0.0%
top 99.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 11
Latest updateJun 26
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/sparsemem: fix race in accessing memory_section->usage
The below race is observed on a PFN which falls into the device memory
region with the system memory configuration where PFN's are such that
[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL]. Since normal zone start and end
pfn contains the device memory PFN's as well, the compaction triggered
will try on the device memory PFN's too though they end up in NOP(because
pfn_to_online_p…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linuxf46edbd1b1516da1fb34c917775168d5df576f78 — 90ad17575d26874287271127d43ef3c2af876cea+6
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
16📋Vendor Advisories
15💬Community
1Bugzilla
▶