CVE-2023-52932

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add cond_resched() in get_swap_pages() The softlockup still occurs in get_swap_pages() under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Use the stress-ng tool to increase memory pressure, causing the system to oom frequently. The plist_for_each_entry_safe() loops in get_swap_pages() could reach tens of thousands of times to find available space (extreme case: cond_resched() is not called in scan_swap_map_slots()). Let's add cond_resched() into get_swap_pages() when failed to find available space to avoid softlockup.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMar 27, 2025
First seenMar 27, 2025
Weakness typeCWE-667CWE-667

How to fix

Update
  • linux linux_kernel4.14.306, 4.19.273, 5.4.232, 5.10.168, 5.15.93, 6.1.11 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 4.14.306, 4.15 ≤ v < 4.19.273, 4.20 ≤ v < 5.4.232, 5.5 ≤ v < 5.10.168, 5.11 ≤ v < 5.15.93, 5.16 ≤ v < 6.1.11, 6.24.14.306, 4.19.273, 5.4.232, 5.10.168, 5.15.93, 6.1.11

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.