HighFix available
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.325, 5.10.231, 5.15.174, 5.4.287, 6.1.119, 6.11.10, 6.6.63
- CVEs
- CVE-2024-53136
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 23:12 UTC · Revision 1
Source evidence
mm: revert "mm: shmem: fix data-race in shmem_getattr()"
core-osv · Original sourcePublished 4 Dec 2024, 14:20 UTC
In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, "added just to silence a syzbot sanitizer splat: added where there has never been any practical problem".
osv:CVE-2024-53136
Kernel
Fixed versions: 4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.119, 6.6.63, 6.11.10
Complete source record
{
"id": "09b46c61221df4752de3f5c1d2f3d1af5e0f3985922b9631fdc951b61265e7d8",
"url": "https://osv.dev/vulnerability/CVE-2024-53136",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mm: revert \"mm: shmem: fix data-race in shmem_getattr()\"",
"summary": "In the Linux kernel, the following vulnerability has been resolved: mm: revert \"mm: shmem: fix data-race in shmem_getattr()\" Revert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as suggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over NFS. As Hugh commented, \"added just to silence a syzbot sanitizer splat: added where there has never been any practical problem\".",
"evidence": "osv:CVE-2024-53136",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.325",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.287",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.231",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.174",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.119",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.63",
"evidence": "/affected/1/ranges"
},
{
"value": "6.11.10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-53136",
"aliases": [
"CVE-2024-53136"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "9fb9703cd43ee20a6de8ccdef991677b7274cec0"
},
{
"fixed": "36b537e8f302f670c7cf35d88a3a294443e32d52"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "7cc30ada84323be19395094d567579536e0d187e"
},
{
"fixed": "a3c65022d89d5baa2cea8e87a6de983ea305f14c"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "bda1a99a0dd644f31a87d636ac624eeb975cb65a"
},
{
"fixed": "57cc8d253099d1b8627f0fb487ee011d9158ccc9"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3d9528484480e8f4979b3a347930ed383be99f89"
},
{
"fixed": "d3f9d88c2c03b2646ace336236adca19f7697bd3"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "82cae1e30bd940253593c2d4f16d88343d1358f4"
},
{
"fixed": "5874c1150e77296565ad6e495ef41fbf87570d14"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "edd1f905050686fdc4cfe233d818469fdf7d5ff8"
},
{
"fixed": "64e67e8694252c1bf01b802ee911be3fee62c36b"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "ffd56612566bc23877c8f45def2801f3324a222a"
},
{
"fixed": "901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "d949d1d14fa281ace388b1de978e8f2cd52875cf"
},
{
"fixed": "d1aa0c04294e29883d65eac6c2f72fe95cc7c049"
}
]
}
],
"versions": [
"v4.19.324",
"v4.19.323",
"v5.4.286",
"v5.4.285",
"v5.10.230",
"v5.10.229",
"v5.15.173",
"v5.15.172",
"v5.15.171",
"v6.1.118",
"v6.1.117",
"v6.1.116",
"v6.6.62",
"v6.6.61",
"v6.6.60",
"v6.11.9",
"v6.11.8",
"v6.11.7"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53136.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.19.323"
},
{
"fixed": "4.19.325"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.4.285"
},
{
"fixed": "5.4.287"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.10.229"
},
{
"fixed": "5.10.231"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.15.171"
},
{
"fixed": "5.15.174"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.1.116"
},
{
"fixed": "6.1.119"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.6.60"
},
{
"fixed": "6.6.63"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.11.7"
},
{
"fixed": "6.11.10"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53136.json"
}
}
],
"modified": "2026-10-28T02:30:24.533814317Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/36b537e8f302f670c7cf35d88a3a294443e32d52",
"https://git.kernel.org/stable/c/57cc8d253099d1b8627f0fb487ee011d9158ccc9",
"https://git.kernel.org/stable/c/5874c1150e77296565ad6e495ef41fbf87570d14",
"https://git.kernel.org/stable/c/64e67e8694252c1bf01b802ee911be3fee62c36b",
"https://git.kernel.org/stable/c/901dc2ad7c3789fa87dc3956f6697c5d62d5cf7e",
"https://git.kernel.org/stable/c/a3c65022d89d5baa2cea8e87a6de983ea305f14c",
"https://git.kernel.org/stable/c/d1aa0c04294e29883d65eac6c2f72fe95cc7c049",
"https://git.kernel.org/stable/c/d3f9d88c2c03b2646ace336236adca19f7697bd3",
"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53136.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-53136",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53136.json"
}
},
"related_cves": [
{
"value": "CVE-2024-53136",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 490786,
"published_at": "2024-12-04T14:20:41.634+00:00"
}