CVE-2024-1312: Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-08 · updated 2026-06-17
Weakness: CWE-416

Description

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function. This issue could allow a local user to crash the system.

Affected products

Fedoraproject Fedora: 39
Linux kernel: before 6.5; 6.5-rc1, 6.5-rc2, 6.5-rc3 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

https://access.redhat.com/security/cve/CVE-2024-1312
https://bugzilla.redhat.com/show_bug.cgi?id=2225569
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/mm/memory.c?h=v6.8-rc3&id=657b5146955eba331e01b9a6ae89ce2e716ba306
https://access.redhat.com/security/cve/CVE-2024-1312
https://bugzilla.redhat.com/show_bug.cgi?id=2225569
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/mm/memory.c?h=v6.8-rc3&id=657b5146955eba331e01b9a6ae89ce2e716ba306

Get alerted when CVE-2024-1312 or the next vulnerability affects your stack