01 Record

CVE-2024-53136

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.42% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 36.3% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-04 14:20Z1 YR AGO

Last updated

2026-08-05 11:44Z2 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

fdf5609b26c0dde234774a813f1b48ebe26f69c12c831bf9803594f00efd4c42

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9fb9703cd43ee20a6de8ccdef991677b7274cec0 to < 36b537e8f302f670c7cf35d88a3a294443e32d52, 7cc30ada84323be19395094d567579536e0d187e to < a3c65022d89d5baa2cea8e87a6de983ea305f14c, bda1a99a0dd644f31a87d636ac624eeb975cb65a to < 57cc8d253099d1b8627f0fb487ee011d9158ccc9, 3d9528484480e8f4979b3a347930ed383be99f89 to < d3f9d88c2c03b2646ace336236adca19f7697bd3, 82cae1e30bd940253593c2d4f16d88343d1358f4 to < 5874c1150e77296565ad6e495ef41fbf87570d14, edd1f905050686fdc4cfe233d818469fdf7d5ff8 to < 64e67e8694252c1bf01b802ee911be3fee62c36b, ffd56612566bc23877c8f45def2801f3324a222a to < 901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e, d949d1d14fa281ace388b1de978e8f2cd52875cf to < d1aa0c04294e29883d65eac6c2f72fe95cc7c049, 4.19.323 to < 4.19.325, 5.4.285 to < 5.4.287, 5.10.229 to < 5.10.231, 5.15.171 to < 5.15.174, 6.1.116 to < 6.1.119, 6.6.60 to < 6.6.63, 6.11.7 to < 6.11.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/36b537e8f302f670c7cf35d88a3a294443e32d52
git.kernel.orghttps://git.kernel.org/stable/c/a3c65022d89d5baa2cea8e87a6de983ea305f14c
git.kernel.orghttps://git.kernel.org/stable/c/57cc8d253099d1b8627f0fb487ee011d9158ccc9
git.kernel.orghttps://git.kernel.org/stable/c/d3f9d88c2c03b2646ace336236adca19f7697bd3
git.kernel.orghttps://git.kernel.org/stable/c/5874c1150e77296565ad6e495ef41fbf87570d14
git.kernel.orghttps://git.kernel.org/stable/c/64e67e8694252c1bf01b802ee911be3fee62c36b
git.kernel.orghttps://git.kernel.org/stable/c/901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e
git.kernel.orghttps://git.kernel.org/stable/c/d1aa0c04294e29883d65eac6c2f72fe95cc7c049
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.119-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.11.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.11.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.