Linux Kernel Vulnerability in Memory Management Functions

CVE-2023-53401

What is CVE-2023-53401?

A vulnerability in the Linux kernel's memory management functions allows for a NULL pointer dereference during object stock flushing. This issue was detected by the Kernel Concurrency Sanitizer (KCSAN) and occurs when the cached object control group can be reset between a check and dereference, potentially leading to instability or crashes in systems utilizing affected kernel versions. Remediation involves implementing READ_ONCE() and WRITE_ONCE() for secure access to specific memory locations.

References