PT-2024-21502 · Linux+8 · Linux Kernel+8
Huang
+1
·
Published
2024-04-03
·
Updated
2026-05-26
·
CVE-2024-26759
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8
Description
A race condition in the Linux kernel's swap cache can cause data corruption when two or more threads swap in the same entry at the same time. This can lead to a stalled page being installed into the page table, resulting in data loss. The issue is triggered when multiple threads swap in the same entry simultaneously, causing the
pte same check to pass even though the page has been modified. This can happen when using a small swap device and multiple threads are updating mapped pages in opposite directions. A reproducer has been created to demonstrate this issue, which can cause data loss at a rate of about once every 5 minutes.Recommendations
To resolve this issue, update the Linux kernel to version 6.8 or later, which includes the fix for this vulnerability. If updating is not possible, consider disabling the swap cache or restricting its use to minimize the risk of exploitation. Additionally, avoid using small swap devices and limit the number of threads that can swap in the same entry simultaneously.
Exploit
Fix
DoS
Memory Corruption
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse