CVE-2023-53614

mm/ksm: fix race with VMA iteration and mm_struct teardown

MEDIUM
4.7
CVSS Score
Published: October 4, 2025 at 03:44 PM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.7
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix race with VMA iteration and mm_struct teardown exit_mmap() will tear down the VMAs and maple tree with the mmap_lock held in write mode. Ensure that the maple tree is still valid by checking ksm_test_exit() after taking the mmap_lock in read mode, but before the for_each_vma() iterator dereferences a destroyed maple tree. Since the maple tree is destroyed, the flags telling lockdep to check an external lock has been cleared. Skip the for_each_vma() iterator to avoid dereferencing a maple tree without the external lock flag, which would create a lockdep warning.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.1 ≤ v < 6.1.226.1 ≤ v < 6.2.96.1 ≤ v < 6.36.2 ≤ v < 6.2.96.16.3 rc16.3 rc26.3 rc3a5f18ba0727656bd1fe3bcdb0d563f81790f9a04
Vendor states this is fixed in 286b0cab31bac29960e5684f6fb331d42f03b363 (fixed)
Vendor states this is fixed in 6db504ce55bdbc575723938fc480713c9183f6a2 (fixed)
Vendor states this is fixed in b4f664ffd8f78c05a1fd542a28bc5a11e994c014 (fixed)
Vendor states this is fixed in 6.1 (unaffected)
Vendor states this is fixed in 6.1.22 (unaffected)
Vendor states this is fixed in 6.2.9 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card