CVE-2023-52939

Summary

CVE-2023-52939 is a Linux kernel vulnerability that could result in a NULL pointer dereference. This issue is caused by the memcg component, specifically in the mem_cgroup_track_foreign_dirty_slowpath() function. When certain conditions are met, hwpoison may forcibly uncharge a LRU page, leading to a folio_memcg being set to NULL. Consequently, mem_cgroup_track_foreign_dirty() does not record foreign writebacks for the affected memcg, preventing a NULL pointer dereference. The vulnerability has been resolved by committing changes to not record foreign writebacks when the memcg is null.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.