CVE-2024-53136

low-risk
Published 2024-12-04

In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.7/10 Medium
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Linux

References (10)

Patch https://git.kernel.org/stable/c/36b537e8f302f670c7cf35d88a3a294443e32d52
https://git.kernel.org/stable/c/57cc8d253099d1b8627f0fb487ee011d9158ccc9
Patch https://git.kernel.org/stable/c/5874c1150e77296565ad6e495ef41fbf87570d14
Patch https://git.kernel.org/stable/c/64e67e8694252c1bf01b802ee911be3fee62c36b
Patch https://git.kernel.org/stable/c/901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e
https://git.kernel.org/stable/c/a3c65022d89d5baa2cea8e87a6de983ea305f14c
Patch https://git.kernel.org/stable/c/d1aa0c04294e29883d65eac6c2f72fe95cc7c049
https://git.kernel.org/stable/c/d3f9d88c2c03b2646ace336236adca19f7697bd3
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
17
/ 100
low-risk
Severity 12/34 · Low
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal