CVE-2024-26960

In the Linux kernel, the following vulnerability has been resolved:

mm: swap: fix race between free_swap_and_cache() and swapoff()

The Linux kernel CVE team has assigned CVE-2024-26960 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050129-CVE-2024-26960-ad6b@gregkh/T

This vulnerability is rated as having a Low impact because triggering the race condition requires administrative privileges to deactivate swap space on the system. The issue arises during swap deallocation when a swap area is dismantled concurrently with processes releasing their cached swap pages. Because privileged access is necessary to initiate swap deactivation and the timing window to induce memory corruption or a system crash is extremely narrow, unprivileged attackers cannot directly exploit this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.