CVE-2024-43853

A use-after-free (UAF) flaw was found in the proc_cpuset_show() function. This issue can allow an attacker to access the css of the root caused by a race condition when the cgroup_root should be freed when it is unmounted from the resource.

The cpuset resource can only impact the availability of the system by skipping limitations from the CPU and causing a Denial of Service attack.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No mitigation is available for this issue other than updating the affected package to the version containing the fix.