CVE-2024-36943

A flaw was found in the Linux kernel's memory management component. A race condition occurs during pagemap scanning when updating page table entries without proper synchronization. A local user could exploit this timing issue during concurrent memory access to cause a Denial of Service (DoS) or memory corruption as a result of lost page tracking flags.

This vulnerability is classified as having a Moderate impact because exploitation is constrained to authenticated local users and requires winning a tight race condition during pagemap scanning operations, bounding the impact to local denial of service or localized memory corruption rather than privilege escalation. Additionally, supported versions of Red Hat Enterprise Linux do not include the pagemap scanning functionality that introduced this issue, leaving enterprise deployments unaffected. Exploitation is further mitigated by the high level of access concurrency and precise timing needed to trigger the flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.