Threats tagged 'ghsa-hxw3-49vc-4rrp'

CVE-2024-43892 is a concurrency vulnerability in the Linux kernel's memory control group (memcg) subsystem. It involves a race condition in the management of mem_cgroup_idr, an IDR structure used to track memcg IDs. The flaw allows concurrent idr_remove() calls without proper synchronization, potentially causing multiple memcgs to share the same ID. This leads to kernel crashes related to list_lru operations due to corrupted or missing list_lru_one entries.