In the Linux kernel, the following vulnerability has been resolved:
mm: zswap: fix missing folio cleanup in writeback race path
In zswap_writeback_entry(), after we get a folio from __read_swap_cache_async(), we grab the tree lock again to check that the swap entry was not invalidated and recycled. If it was, we delete the folio we just added to the swap cache and exit.
However, __read_swap_cache_async() returns the folio locked when it is newly allocated, which is always true for this path, and the folio is ref'd. Make sure to unlock and put the folio before returning.
This was discovered by code inspection, probably because this path handles a race condition that should not happen often, and the bug would not crash the system, it will only strand the folio indefinitely.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-azure-optional | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub