CVE-2024-53136

MediumCVSS 4.7/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS.

As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
LinuxLinux>= 9fb9703cd43ee20a6de8ccdef991677b7274cec0, < 36b537e8f302f670c7cf35d88a3a294443e32d52; >= 7cc30ada84323be19395094d567579536e0d187e, < a3c65022d89d5baa2cea8e87a6de983ea305f14c; >= bda1a99a0dd644f31a87d636ac624eeb975cb65a, < 57cc8d253099d1b8627f0fb487ee011d9158ccc9; >= 3d9528484480e8f4979b3a347930ed383be99f89, < d3f9d88c2c03b2646ace336236adca19f7697bd3; >= 82cae1e30bd940253593c2d4f16d88343d1358f4, < 5874c1150e77296565ad6e495ef41fbf87570d14; >= edd1f905050686fdc4cfe233d818469fdf7d5ff8, < 64e67e8694252c1bf01b802ee911be3fee62c36b; >= ffd56612566bc23877c8f45def2801f3324a222a, < 901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e; >= d949d1d14fa281ace388b1de978e8f2cd52875cf, < d1aa0c04294e29883d65eac6c2f72fe95cc7c049
LinuxLinux>= 4.19.323, < 4.19.325; >= 5.4.285, < 5.4.287; >= 5.10.229, < 5.10.231; >= 5.15.171, < 5.15.174; >= 6.1.116, < 6.1.119; >= 6.6.60, < 6.6.63; >= 6.11.7, < 6.11.10

References

Timeline

Published
Dec 4, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-531375.5In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got CVE-2024-531385.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling cCVE-2024-531397.8In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctp_v6_available() A lockdep report [1] witCVE-2024-53149.1Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attackerCVE-2024-531405.5In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iCVE-2024-531417.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPCVE-2024-531427.8In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field CVE-2024-531437.8In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure CVE-2024-531445.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligCVE-2024-531455.5In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue hapCVE-2024-531465.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32CVE-2024-531477.1In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of th
CVE-2024-53136: Medium severity, CVSS 4.7 | Vulnix