| { |
| "containers": { |
| "cna": { |
| "providerMetadata": { |
| "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038" |
| }, |
| "descriptions": [ |
| { |
| "lang": "en", |
| "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: revert \"mm: shmem: fix data-race in shmem_getattr()\"\n\nRevert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as\nsuggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over\nNFS.\n\nAs Hugh commented, \"added just to silence a syzbot sanitizer splat: added\nwhere there has never been any practical problem\"." |
| } |
| ], |
| "affected": [ |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "mm/shmem.c" |
| ], |
| "versions": [ |
| { |
| "version": "9fb9703cd43ee20a6de8ccdef991677b7274cec0", |
| "lessThan": "36b537e8f302f670c7cf35d88a3a294443e32d52", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "7cc30ada84323be19395094d567579536e0d187e", |
| "lessThan": "a3c65022d89d5baa2cea8e87a6de983ea305f14c", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "bda1a99a0dd644f31a87d636ac624eeb975cb65a", |
| "lessThan": "57cc8d253099d1b8627f0fb487ee011d9158ccc9", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "3d9528484480e8f4979b3a347930ed383be99f89", |
| "lessThan": "d3f9d88c2c03b2646ace336236adca19f7697bd3", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "82cae1e30bd940253593c2d4f16d88343d1358f4", |
| "lessThan": "5874c1150e77296565ad6e495ef41fbf87570d14", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "edd1f905050686fdc4cfe233d818469fdf7d5ff8", |
| "lessThan": "64e67e8694252c1bf01b802ee911be3fee62c36b", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "ffd56612566bc23877c8f45def2801f3324a222a", |
| "lessThan": "901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e", |
| "status": "affected", |
| "versionType": "git" |
| }, |
| { |
| "version": "d949d1d14fa281ace388b1de978e8f2cd52875cf", |
| "lessThan": "d1aa0c04294e29883d65eac6c2f72fe95cc7c049", |
| "status": "affected", |
| "versionType": "git" |
| } |
| ] |
| }, |
| { |
| "product": "Linux", |
| "vendor": "Linux", |
| "defaultStatus": "unaffected", |
| "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", |
| "programFiles": [ |
| "mm/shmem.c" |
| ], |
| "versions": [ |
| { |
| "version": "4.19.323", |
| "lessThan": "4.19.325", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.4.285", |
| "lessThan": "5.4.287", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.10.229", |
| "lessThan": "5.10.231", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "5.15.171", |
| "lessThan": "5.15.174", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.1.116", |
| "lessThan": "6.1.119", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.6.60", |
| "lessThan": "6.6.63", |
| "status": "affected", |
| "versionType": "semver" |
| }, |
| { |
| "version": "6.11.7", |
| "lessThan": "6.11.10", |
| "status": "affected", |
| "versionType": "semver" |
| } |
| ] |
| } |
| ], |
| "cpeApplicability": [ |
| { |
| "nodes": [ |
| { |
| "operator": "OR", |
| "negate": false, |
| "cpeMatch": [ |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "4.19.323", |
| "versionEndExcluding": "4.19.325" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.4.285", |
| "versionEndExcluding": "5.4.287" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.10.229", |
| "versionEndExcluding": "5.10.231" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "5.15.171", |
| "versionEndExcluding": "5.15.174" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.1.116", |
| "versionEndExcluding": "6.1.119" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.6.60", |
| "versionEndExcluding": "6.6.63" |
| }, |
| { |
| "vulnerable": true, |
| "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", |
| "versionStartIncluding": "6.11.7", |
| "versionEndExcluding": "6.11.10" |
| } |
| ] |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "url": "https://git.kernel.org/stable/c/36b537e8f302f670c7cf35d88a3a294443e32d52" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/a3c65022d89d5baa2cea8e87a6de983ea305f14c" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/57cc8d253099d1b8627f0fb487ee011d9158ccc9" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/d3f9d88c2c03b2646ace336236adca19f7697bd3" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/5874c1150e77296565ad6e495ef41fbf87570d14" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/64e67e8694252c1bf01b802ee911be3fee62c36b" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e" |
| }, |
| { |
| "url": "https://git.kernel.org/stable/c/d1aa0c04294e29883d65eac6c2f72fe95cc7c049" |
| } |
| ], |
| "title": "mm: revert \"mm: shmem: fix data-race in shmem_getattr()\"", |
| "x_generator": { |
| "engine": "bippy-1.2.0" |
| } |
| } |
| }, |
| "cveMetadata": { |
| "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038", |
| "cveID": "CVE-2024-53136", |
| "requesterUserId": "gregkh@kernel.org", |
| "serial": "1", |
| "state": "PUBLISHED" |
| }, |
| "dataType": "CVE_RECORD", |
| "dataVersion": "5.0" |
| } |
