Loading story…
CVE-2023-52562 affects the Linux kernel slab allocator when a module destroys a kmem_cache while allocated objects still exist. If shutdown_cache() fails, kmem_cache_destroy() can release the cache object without removing its entry from the slab_caches list, leaving a stale reference that can corrupt the list and trigger kernel crashes or instability.
A local low-privileged user able to trigger the condition could cause denial of service through system hangs, crashes, or restarts. Red Hat rates the issue Low severity with a CVSS score of 5.5 and has released fixes for several RHEL 8 and RHEL 9 package streams; RHEL 8 kernel-rt and RHEL 9 kernel were listed as affected, while RHEL 7 is outside support scope. The flaw reflects a memory-lifecycle failure, where resources are released despite outstanding allocations, creating reliability and availability risk.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2023:7549 for the RHEL 8 kernel and RHSA-2023:7539 for the RHEL 8.8 Extended Update Support kernel, fixing the slab allocator flaw.
Red Hat published its CVE record for CVE-2023-52562, a CWE-401 slab allocator issue that can corrupt the slab_caches list and cause kernel crashes or instability.
Red Hat released RHBA-2024:0611, providing fixes for CVE-2023-52562 in the RHEL 9 Flatpak runtime and SDK streams.
Red Hat released RHSA-2024:0448 to fix CVE-2023-52562 in the RHEL 9.2 Extended Update Support kernel.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2021-47466** affects the Linux kernel's SLUB allocator in `mm/slub.c`, where the error path in `kmem_cache_open()` can fail to release a cache's `random_seq` resource after initialization fails. Introduced in kernel version 4.8, the flaw can cause a memory leak and potentially degrade system availability. It carries a CVSS v3.1 score of 5.5 and requires local access with low privileges. Upstream fixes are available in kernel versions 5.4.156, 5.10.76, 5.14.15, and 5.15 and later; the Linux kernel CVE team recommends deploying a current stable kernel rather than backporting an individual patch. Red Hat remediated affected RHEL 8 kernel and `kernel-rt` packages through advisories **RHSA-2024:7000** and **RHSA-2024:7001**. RHEL 9 and its real-time kernel are not affected, while unsupported RHEL 6 and 7 deployments should be treated as potentially vulnerable unless separately mitigated or upgraded.
Aug 26, 2026
Red Hat released kernel updates for **RHEL 9** and **RHEL 10** addressing several locally exploitable Linux kernel flaws, including `CVE-2025-21647` in the `sch_cake` traffic-control scheduler. An underflow in per-host bulk-flow fairness counters could lead to an out-of-bounds read, potentially exposing kernel memory or crashing the system; Red Hat assigned it a CVSS 3.1 score of 7.1. The upstream correction adds centralized bounds checking for counter access. The updates also remediate denial-of-service issues in the mt76 `mt7925` Wi-Fi driver (`CVE-2024-57989`), HID core (`CVE-2024-57986`), IDPF driver (`CVE-2024-58057`), and Realtek Bluetooth setup path (`CVE-2024-57987`). These flaws can trigger NULL-pointer dereferences, CPU-workqueue starvation, or system crashes under local attack conditions. RHEL 9 `kernel-rt` remains affected or will not fix for several listed issues; organizations should apply the applicable kernel errata and reboot systems to activate the patched kernel.
Aug 26, 2026
Red Hat has documented multiple **CWE-772** resource-management flaws that can exhaust memory or device references and cause denial of service. In the Linux kernel, `CVE-2022-50269` leaks a configuration object if VKMS initialization fails; `CVE-2022-50318` leaks PCI-device references in Intel uncore performance-monitoring code; and `CVE-2022-50372` leaks a CIFS/SMB session-setup request when NTLMSSP negotiate-blob construction fails. Each kernel issue is rated CVSS 5.5 and requires local, low-privileged access to trigger resource exhaustion. Fixes are available for affected RHEL kernel packages, including RHEL 8 for the CIFS issue under **RHSA-2024:5101**, while some RHEL 9 and real-time kernel fixes remain deferred; unsupported branches are generally unaffected where the vulnerable code is absent. Separately, `CVE-2024-2398` affects curl/libcurl HTTP/2 server-push handling: a remote server can repeatedly send oversized pushed headers and cause leaked header memory when libcurl aborts the push. Rated CVSS 7.5, that flaw was fixed for affected JBoss Core Services HTTPD 2.4 components on RHEL 7 and 8 in **RHSA-2024:2693**.
Aug 27, 2026