PT-2023-8295 · Linux+2 · Linux Kernel+2
Jay Shin
+1
·
Publicado
2023-11-07
·
Atualizado
2024-05-20
·
CVE-2024-0443
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw was found in the blkgs destruction path in block/blk-cgroup.c, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed,
cgroup rstat flush() is only called at css release work fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with local access to cause system instability, such as an out of memory error.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Exposure of Resource to Wrong Sphere
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Linux Kernel
Red Hat