{"id":"CVE-2024-43888","title":"mm: list_lru: fix UAF for memory cgroup","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm: list_lru: fix UAF for memory cgroup\n\nThe mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or\ncgroup_mutex or others which could prevent returned m…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 4589f77c18dd98b65f45617b6d1e95313cf6fcab","Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 5161b48712dcd08ec427c450399d4d1483e21dea","Linux 32d7120a499d475bc03e893c59611116279bcfb8","Linux >= 6.6.160 < 6.7","Linux 6.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-10T15:31:59.160632Z"},"published":"2024-08-26","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:35:08.851Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-43888","references":[{"url":"https://git.kernel.org/stable/c/4589f77c18dd98b65f45617b6d1e95313cf6fcab"},{"url":"https://git.kernel.org/stable/c/5161b48712dcd08ec427c450399d4d1483e21dea"}],"tags":["cve.org"],"epss":0.00253,"epssPercentile":0.16669,"ingestedAt":"2026-10-21T12:48:53.732Z","slug":"CVE-2024-43888","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm: list_lru: fix UAF for memory cgroup\n\nThe mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or\ncgroup_mutex or others which could prevent returned memcg from being\nfreed.  Fix it by adding missing rcu read lock.\n\nFound by code inspection.\n\n[songmuchun@bytedance.com: only grab rcu lock when necessary, per Vlastimil]\n\n## Affected\n\n- `Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 4589f77c18dd98b65f45617b6d1e95313cf6fcab`\n- `Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 5161b48712dcd08ec427c450399d4d1483e21dea`\n- `Linux 32d7120a499d475bc03e893c59611116279bcfb8`\n- `Linux >= 6.6.160 < 6.7`\n- `Linux 6.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}