CVE-2024-35797

CVE-2024-35797 is a vulnerability in the Linux kernel’s memory management, specifically affecting the cachestat feature when handling shared memory. The flaw stems from race conditions during operations like swapping or invalidation, which can lead to out-of-bounds memory access or invalid pointer dereferencing. These issues can result in crashes or system instability. The kernel has been patched to improve checks and handling of swap entries to ensure stable and safe operation.

This vulnerability is rated as having a Moderate impact because it requires local access to trigger concurrent shared memory swapping and cachestat operations, which can lead to a system crash. The issue is confined to local users with access to the system call interface and cannot be exploited across the network. Successful triggering causes kernel instability or a denial of service rather than code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.