CVE-2024-43888

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free (UAF) vulnerability in the memory cgroup functionality of the Linux kernel. The mem cgroup from slab obj() function is supposed to be called under rcu lock or cgroup mutex to prevent the returned memcg from being freed. The fix involves adding a missing rcu read lock. This vulnerability was found by code inspection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.