CVE-2023-53621

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a flaw in the memcontrol subsystem related to how memory cgroups (memcg) were handled. Specifically, the issue arose during the eviction recency check, where an attempt was made to retrieve a memcg by its ID. There was a possibility of retrieving a newly allocated memcg instead of the original one that had been killed. This could lead to a NULL pointer dereference during memcg hierarchy traversal in the mem cgroup get nr swap pages() function, potentially causing a system crash. The patch resolves this by adjusting the timing of memcg ID publication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.