PT-2024-29248 · Linux+6 · Linux Kernel+6

Baokun Li

·

Published

2024-05-22

·

Updated

2026-05-26

·

CVE-2024-41075

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks include:
  • Generic, copen can only complete open requests, and cread can only complete read requests.
  • For copen, ondemand id must not be 0, because this indicates that the request has not been read by the daemon.
  • For cread, the object corresponding to fd and req should be the same.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

BDU:2025-08039
CVE-2024-41075
DLA-4008-1
MGASA-2024-0277
MGASA-2024-0278
OESA-2024-1960
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu