PT-2025-37542 · Linux+7 · Linux Kernel+7
Published
2023-01-01
·
Updated
2026-05-26
·
CVE-2023-53178
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The zswap writeback mechanism contains a race condition that can lead to memory corruption. Specifically, a swapped-out page can be swapped in with data written to a different page. This occurs when a page is removed for writeback, a user-space program faults and invalidates the page entry, and another page is stored at the same offset in zswap. The fix involves checking that the local zswap entry reference remains the same during writeback; if it has changed, the writeback is aborted. The issue was originally discovered during testing with the
stress tool.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Time Of Check To Time Of Use
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse