CVE-2024-57977

Summary

CVE-2024-57977: A soft lockup vulnerability was identified in the Linux kernel's memcg module. With approximately 56,000 tasks in the Out of Memory (OOM) cgroup, the system encountered a lockup when traversing the tasks. Specifically, the issue occurred in the 'mem_cgroup_scan_tasks' function, leading to a soft lockup in the OOM process. To mitigate this issue, developers have been advised to call 'cond_resched' every 1000 iterations in the 'mem_cgroup_scan_tasks' function for tasks within a cgroup. Additionally, for global OOM scenarios, calling 'touch_softlockup_watchdog' per 1000 iterations is recommended to prevent soft lockups.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.