[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-53178":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":92,"related":93,"reserved_at":9,"published_at":108,"modified_at":109,"state":110,"summary":111,"references_raw":120,"kevs":135,"epss":136,"epss_history":139,"metrics":402,"affected":408},"CVE-2023-53178","In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix zswap writeback race condition\n\nThe zswap writeback mechanism can cause a race condition resulting in\nmemory corruption, where a swapped out page gets swapped in with data that\nwas written to a different page.\n\nThe race unfolds like this:\n1. a page with data A and swap offset X is stored in zswap\n2. page A is removed off the LRU by zpool driver for writeback in\n   zswap-shrink work, data for A is mapped by zpool driver\n3. user space program faults and invalidates page entry A, offset X is\n   considered free\n4. kswapd stores page B at offset X in zswap (zswap could also be\n   full, if so, page B would then be IOed to X, then skip step 5.)\n5. entry A is replaced by B in tree->rbroot, this doesn't affect the\n   local reference held by zswap-shrink work\n6. zswap-shrink work writes back A at X, and frees zswap entry A\n7. swapin of slot X brings A in memory instead of B\n\nThe fix:\nOnce the swap page cache has been allocated (case ZSWAP_SWAPCACHE_NEW),\nzswap-shrink work just checks that the local zswap_entry reference is\nstill the same as the one in the tree.  If it's not the same it means that\nit's either been invalidated or replaced, in both cases the writeback is\naborted because the local entry contains stale data.\n\nReproducer:\nI originally found this by running `stress` overnight to validate my work\non the zswap writeback mechanism, it manifested after hours on my test\nmachine.  The key to make it happen is having zswap writebacks, so\nwhatever setup pumps /sys/kernel/debug/zswap/written_back_pages should do\nthe trick.\n\nIn order to reproduce this faster on a vm, I setup a system with ~100M of\navailable memory and a 500M swap file, then running `stress --vm 1\n--vm-bytes 300000000 --vm-stride 4000` makes it happen in matter of tens\nof minutes.  One can speed things up even more by swinging\n/sys/module/zswap/parameters/max_pool_percent up and down between, say, 20\nand 1; this makes it reproduce in tens of seconds.  It's crucial to set\n`--vm-stride` to something other than 4096 otherwise `stress` won't\nrealize that memory has been corrupted because all pages would have the\nsame data.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90],{"_key":33},"SUSE-SU-2025:03613-1",{"_key":35},"SUSE-SU-2025:03614-1",{"_key":37},"SUSE-SU-2025:03615-1",{"_key":39},"SUSE-SU-2025:03626-1",{"_key":41},"SUSE-SU-2025:03628-1",{"_key":43},"SUSE-SU-2025:3716-1",{"_key":45},"SUSE-SU-2025:3761-1",{"_key":47},"SUSE-SU-2026:0617-1",{"_key":49},"RHSA-2025:19886",{"_key":51},"RHSA-2025:21051",{"_key":53},"RHSA-2025:21128",{"_key":55},"RHSA-2025:23947",{"_key":57},"RHSA-2025:23960",{"_key":59},"RHSA-2025:19931",{"_key":61},"RHSA-2025:19932",{"_key":63},"SUSE-SU-2026:0473-1",{"_key":65},"SUSE-SU-2026:0474-1",{"_key":67},"SUSE-SU-2026:0475-1",{"_key":69},"SUSE-SU-2026:0495-1",{"_key":71},"SUSE-SU-2026:0496-1",{"_key":73},"SUSE-SU-2026:1131-1",{"_key":75},"DEBIAN-CVE-2023-53178",{"_key":77},"RHSA-2025:21084",{"_key":79},"RHSA-2025:21083",{"_key":81},"RHSA-2025:21091",{"_key":83},"RHSA-2025:21136",{"_key":85},"RHSA-2025:22752",{"_key":87},"RHSA-2025:23445",{"_key":89},"RHSA-2024:9315",{"_key":91},"UBUNTU-CVE-2023-53178",[],[94,95,96,97,98,99,100,101,102,103,104,105,106,107],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},"2025-09-15T14:04:23.768Z","2026-05-11T19:39:46.798Z","Analyzed",{"cisa_kev":112,"cisa_ransomware":112,"cisa_vendor":9,"epss_severity":113,"epss_score":114,"severity":115,"severity_score":116,"severity_version":117,"severity_source":118,"severity_vector":119,"severity_status":110},false,"low",0.00014,"medium",4.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[121,127,131],{"url":122,"sources":123,"tags":125},"https://git.kernel.org/stable/c/2cab13f500a6333bd2b853783ac76be9e4956f8a",[124,118],"cve.org",[126],"Patch",{"url":128,"sources":129,"tags":130},"https://git.kernel.org/stable/c/ba700ea13bf0105a4773c654f7d3bef8adb64ab2",[124,118],[126],{"url":132,"sources":133,"tags":134},"https://git.kernel.org/stable/c/04fc7816089c5a32c29a04ec94b998e219dfb946",[124,118],[126],[],{"date":137,"score":114,"percentile":138},"2026-06-03",0.02772,[140,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,199,202,205,208,211,214,217,220,223,226,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,280,282,285,288,291,294,296,299,301,303,306,308,311,314,317,320,322,324,327,329,332,335,338,341,343,345,347,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399],{"date":141,"score":142,"percentile":143},"2025-11-04",0.00024,0.05089,{"date":145,"score":142,"percentile":146},"2025-11-05",0.05097,{"date":148,"score":142,"percentile":149},"2025-11-06",0.05213,{"date":151,"score":142,"percentile":152},"2025-11-07",0.05218,{"date":154,"score":142,"percentile":155},"2025-11-08",0.05217,{"date":157,"score":142,"percentile":158},"2025-11-09",0.05221,{"date":160,"score":142,"percentile":161},"2025-11-10",0.05198,{"date":163,"score":142,"percentile":164},"2025-11-11",0.05228,{"date":166,"score":142,"percentile":167},"2025-11-12",0.05227,{"date":169,"score":142,"percentile":170},"2025-11-13",0.05244,{"date":172,"score":142,"percentile":173},"2025-11-14",0.0528,{"date":175,"score":142,"percentile":176},"2025-11-15",0.05306,{"date":178,"score":142,"percentile":179},"2025-11-16",0.05317,{"date":181,"score":142,"percentile":182},"2025-11-17",0.05312,{"date":184,"score":142,"percentile":185},"2025-11-18",0.03168,{"date":187,"score":142,"percentile":188},"2025-11-19",0.03218,{"date":190,"score":142,"percentile":191},"2025-11-20",0.03283,{"date":193,"score":142,"percentile":194},"2025-11-21",0.05362,{"date":196,"score":197,"percentile":198},"2025-11-22",0.00025,0.05714,{"date":200,"score":197,"percentile":201},"2025-11-23",0.05699,{"date":203,"score":197,"percentile":204},"2025-11-24",0.05697,{"date":206,"score":197,"percentile":207},"2025-11-25",0.05698,{"date":209,"score":197,"percentile":210},"2025-11-26",0.05725,{"date":212,"score":197,"percentile":213},"2025-11-27",0.05737,{"date":215,"score":197,"percentile":216},"2025-11-28",0.0571,{"date":218,"score":197,"percentile":219},"2025-11-29",0.0575,{"date":221,"score":197,"percentile":222},"2025-11-30",0.05744,{"date":224,"score":197,"percentile":225},"2025-12-01",0.05822,{"date":227,"score":228,"percentile":229},"2025-12-02",0.00016,0.02741,{"date":231,"score":228,"percentile":232},"2025-12-03",0.02742,{"date":234,"score":228,"percentile":235},"2025-12-04",0.02682,{"date":237,"score":228,"percentile":238},"2025-12-05",0.02693,{"date":240,"score":228,"percentile":241},"2025-12-06",0.02708,{"date":243,"score":228,"percentile":244},"2025-12-07",0.02718,{"date":246,"score":228,"percentile":247},"2025-12-08",0.02712,{"date":249,"score":228,"percentile":250},"2025-12-09",0.02732,{"date":252,"score":228,"percentile":253},"2025-12-10",0.0276,{"date":255,"score":228,"percentile":256},"2025-12-11",0.02765,{"date":258,"score":228,"percentile":259},"2025-12-12",0.02777,{"date":261,"score":228,"percentile":262},"2025-12-13",0.02748,{"date":264,"score":228,"percentile":265},"2025-12-14",0.0275,{"date":267,"score":228,"percentile":268},"2025-12-15",0.02744,{"date":270,"score":228,"percentile":271},"2025-12-16",0.02739,{"date":273,"score":228,"percentile":274},"2025-12-17",0.02752,{"date":276,"score":228,"percentile":277},"2025-12-18",0.02759,{"date":279,"score":228,"percentile":256},"2025-12-19",{"date":281,"score":228,"percentile":253},"2025-12-20",{"date":283,"score":228,"percentile":284},"2025-12-21",0.02761,{"date":286,"score":228,"percentile":287},"2025-12-22",0.02764,{"date":289,"score":228,"percentile":290},"2025-12-23",0.02766,{"date":292,"score":228,"percentile":293},"2025-12-24",0.02769,{"date":295,"score":228,"percentile":259},"2025-12-25",{"date":297,"score":228,"percentile":298},"2025-12-26",0.02779,{"date":300,"score":228,"percentile":277},"2025-12-27",{"date":302,"score":228,"percentile":138},"2025-12-28",{"date":304,"score":228,"percentile":305},"2025-12-29",0.02762,{"date":307,"score":228,"percentile":277},"2025-12-30",{"date":309,"score":228,"percentile":310},"2025-12-31",0.02753,{"date":312,"score":228,"percentile":313},"2026-01-01",0.02813,{"date":315,"score":228,"percentile":316},"2026-01-02",0.0281,{"date":318,"score":228,"percentile":319},"2026-01-03",0.02809,{"date":321,"score":228,"percentile":268},"2026-01-04",{"date":323,"score":228,"percentile":262},"2026-01-05",{"date":325,"score":228,"percentile":326},"2026-01-06",0.02745,{"date":328,"score":228,"percentile":287},"2026-01-07",{"date":330,"score":228,"percentile":331},"2026-01-08",0.02792,{"date":333,"score":228,"percentile":334},"2026-01-09",0.02804,{"date":336,"score":228,"percentile":337},"2026-01-10",0.02805,{"date":339,"score":228,"percentile":340},"2026-01-11",0.0279,{"date":342,"score":228,"percentile":262},"2026-01-12",{"date":344,"score":228,"percentile":229},"2026-01-13",{"date":346,"score":228,"percentile":326},"2026-01-14",{"date":348,"score":349,"percentile":350},"2026-01-15",0.0002,0.04621,{"date":352,"score":349,"percentile":353},"2026-01-16",0.0459,{"date":355,"score":349,"percentile":356},"2026-01-17",0.04588,{"date":358,"score":349,"percentile":359},"2026-01-18",0.04572,{"date":361,"score":349,"percentile":362},"2026-01-19",0.04524,{"date":364,"score":349,"percentile":365},"2026-01-20",0.0448,{"date":367,"score":349,"percentile":368},"2026-01-21",0.0447,{"date":370,"score":349,"percentile":371},"2026-01-22",0.04454,{"date":373,"score":349,"percentile":374},"2026-01-23",0.04504,{"date":376,"score":349,"percentile":377},"2026-01-24",0.04547,{"date":379,"score":349,"percentile":380},"2026-01-25",0.04543,{"date":382,"score":349,"percentile":383},"2026-01-26",0.04527,{"date":385,"score":349,"percentile":386},"2026-01-27",0.04517,{"date":388,"score":349,"percentile":389},"2026-01-28",0.04503,{"date":391,"score":349,"percentile":392},"2026-01-29",0.0452,{"date":394,"score":349,"percentile":395},"2026-01-30",0.04528,{"date":397,"score":349,"percentile":398},"2026-01-31",0.04505,{"date":400,"score":349,"percentile":401},"2026-02-01",0.04616,[403],{"source":118,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":404,"cvss_v4_0":9},{"baseScore":116,"baseSeverity":405,"vectorString":119,"impactScore":406,"exploitabilityScore":407},"MEDIUM",6,2.6,[409,429],{"ecosystem":9,"name":410,"vendor":411,"product":411,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":413},"Linux","linux","a",[414,421,424,427],{"version":415,"is_range":416,"range_type":124,"version_start":417,"version_start_type":418,"version_end":419,"version_end_type":420,"fixed_in":9},">= 2b2811178e85553405b86e3fe78357b9b95889ce, \u003C 2cab13f500a6333bd2b853783ac76be9e4956f8a",true,"2b2811178e85553405b86e3fe78357b9b95889ce","including","2cab13f500a6333bd2b853783ac76be9e4956f8a","excluding",{"version":422,"is_range":416,"range_type":124,"version_start":417,"version_start_type":418,"version_end":423,"version_end_type":420,"fixed_in":9},">= 2b2811178e85553405b86e3fe78357b9b95889ce, \u003C ba700ea13bf0105a4773c654f7d3bef8adb64ab2","ba700ea13bf0105a4773c654f7d3bef8adb64ab2",{"version":425,"is_range":416,"range_type":124,"version_start":417,"version_start_type":418,"version_end":426,"version_end_type":420,"fixed_in":9},">= 2b2811178e85553405b86e3fe78357b9b95889ce, \u003C 04fc7816089c5a32c29a04ec94b998e219dfb946","04fc7816089c5a32c29a04ec94b998e219dfb946",{"version":428,"is_range":112,"range_type":124,"version_start":428,"version_start_type":418,"version_end":428,"version_end_type":418,"fixed_in":9},"3.11",{"ecosystem":9,"name":430,"vendor":411,"product":431,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":433},"linux kernel","linux_kernel","o",[434,438,442,444],{"version":435,"is_range":416,"range_type":436,"version_start":428,"version_start_type":418,"version_end":437,"version_end_type":420,"fixed_in":9},"gte3.11_lt6.1.30","cpe","6.1.30",{"version":439,"is_range":416,"range_type":436,"version_start":440,"version_start_type":418,"version_end":441,"version_end_type":420,"fixed_in":9},"gte6.2_lt6.3.4","6.2","6.3.4",{"version":443,"is_range":112,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.4:rc1",{"version":445,"is_range":112,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.4:rc2"]