Używamy niezbędnych plików cookie do działania DataHouse.pl oraz opcjonalnych cookies do analityki i marketingu. Możesz zaakceptować wszystkie, odrzucić opcjonalne albo skonfigurować zgody.

OK, ZGADZAM SIĘ NIE ZGADZAM SIĘ ZMIENIAM ZGODY

Dzięki plikom cookies i podobnym technologiom (zwanym dalej „plikami cookies”) możemy poprawiać funkcjonalność naszej strony oraz wyświetlać treści dopasowane do Twoich potrzeb i oczekiwań.

Więcej informacji na temat wykorzystywania plików cookies znajdziesz w naszej [Polityce plików cookies].

Wyrażam zgodę na:

Analityczne wykorzystywanie plików cookies

Marketingowe wykorzystywanie plików cookies

Wykorzystywanie niezbędnych plików cookies (zawsze aktywne)

Twoje preferencje dotyczące plików cookies, wyrażone po zalogowaniu do serwisu, zostaną przypisane do Twojego konta Datahouse.pl. Dzięki temu zostaną zachowane także wtedy, gdy zalogujesz się na swoje konto z innego urządzenia lub przeglądarki.

POTWIERDŹ WYBÓR ANULUJ

CVE-2024-35846: linux kernel vulnerability

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroup_disable=memory Christian reports a NULL deref in zswap that he bisected down to the zswap shrinker. The issue also cropped up in the bug trackers of libguestfs [1] and the Red Hat bugzilla [2]. The problem is that when memcg is disabled with the boot time flag, the zswap shrinker might get called with sc->memcg == NULL. This is okay in many places, like the lruvec operations. But it crashes in memcg_page_state() - which is only used due to the non-node accounting of cgroup's the zswap memory to begin with. Nhat spotted that the memcg can be NULL in the memcg-disabled case, and I was then able to reproduce the crash locally as well. [1] https://github.com/libguestfs/libguestfs/issues/139 [2] https://bugzilla.redhat.com/show_bug.cgi?id=2275252

CVE-2024-35846CVSS 5.5Linux

CVE-2024-35846: linux kernel vulnerability

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroup_disable=memory Christian reports a NULL deref in zswap that he bisected down to the zswap shrinker. The issue also cropped up in the bug trackers of libguestfs [1] and the Red Hat bugzilla [2]. The problem is that when memcg is disabled with the boot time flag, the zswap shrinker might get called with sc->memcg == NULL. This is okay in many places, like the lruvec operations. But it crashes in memcg_page_state() - which is only used due to the non-node accounting of cgroup's the zswap memory to begin with. Nhat spotted that the memcg can be NULL in the memcg-disabled case, and I was then able to reproduce the crash locally as well. [1] https://github.com/libguestfs/libguestfs/issues/139 [2] https://bugzilla.redhat.com/show_bug.cgi?id=2275252

CVSS: 5.5 MEDIUM
EPSS: 8.79%
Aktywnie wykorzystywana: brak w KEV
Produkt: linux kernel

Co wiadomo

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroup_disable=memory Christian reports a NULL deref in zswap that he bisected down to the zswap shrinker. The issue also cropped up in the bug trackers of libguestfs [1] and the Red Hat bugzilla [2]. The problem is that when memcg is disabled with the boot time flag, the zswap shrinker might get called with sc->memcg == NULL. This is okay in many places, like the lruvec operations. But it crashes in memcg_page_state() - which is only used due to the non-node accounting of cgroup's the zswap memory to begin with. Nhat spotted that the memcg can be NULL in the memcg-disabled case, and I was then able to reproduce the crash locally as well. [1] https://github.com/libguestfs/libguestfs/issues/139 [2] https://bugzilla.redhat.com/show_bug.cgi?id=2275252

Źródła

Wróć do centrum bezpieczeństwa Skontaktuj się z DataHouse