---
id: CVE-2024-43888
title: 'mm: list_lru: fix UAF for memory cgroup'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm: list_lru: fix UAF for memory cgroup

  The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or
  cgroup_mutex or others which could prevent returned m…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b <
    4589f77c18dd98b65f45617b6d1e95313cf6fcab
  - >-
    Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b <
    5161b48712dcd08ec427c450399d4d1483e21dea
  - Linux 32d7120a499d475bc03e893c59611116279bcfb8
  - Linux >= 6.6.160 < 6.7
  - Linux 6.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T15:31:59.160632Z'
published: '2024-08-26'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:35:08.851Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-43888'
references:
  - url: 'https://git.kernel.org/stable/c/4589f77c18dd98b65f45617b6d1e95313cf6fcab'
  - url: 'https://git.kernel.org/stable/c/5161b48712dcd08ec427c450399d4d1483e21dea'
tags:
  - cve.org
epss: 0.00253
epssPercentile: 0.16669
ingestedAt: '2026-10-21T12:48:53.732Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm: list_lru: fix UAF for memory cgroup

The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or
cgroup_mutex or others which could prevent returned memcg from being
freed.  Fix it by adding missing rcu read lock.

Found by code inspection.

[songmuchun@bytedance.com: only grab rcu lock when necessary, per Vlastimil]

## Affected

- `Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 4589f77c18dd98b65f45617b6d1e95313cf6fcab`
- `Linux >= 0a97c01cd20bb96359d8c9dedad92a061ed34e0b < 5161b48712dcd08ec427c450399d4d1483e21dea`
- `Linux 32d7120a499d475bc03e893c59611116279bcfb8`
- `Linux >= 6.6.160 < 6.7`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.