A subtle but consequential race in the Linux kernel’s memory-control-group (memcg) ID management has been fixed: CVE-2024-43892 describes an insufficiently synchronized idr_remove() path on mem_cgroup_idr that could let multiple memcgs acquire the same ID and, in concrete fleets, has been linked...