PT-2024-33715 · Linux+7 · Linux Kernel+7
Baokun Li
·
Published
2024-08-29
·
Updated
2026-05-26
·
CVE-2024-49870
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A dentry leak may occur in the Linux kernel when a lookup cookie and a cull are concurrent. This happens because the reference count obtained by
lookup one positive unlocked() in cachefiles look up object() is not released. As a result, a WARNING is triggered when the backend folder is umounted, indicating that a dentry is still in use.Recommendations:
To resolve this issue, update to Linux kernel version 6.6.58 or later.
As a temporary workaround, consider disabling the
cachefiles open file() function until a patch is available.
Restrict access to the vulnerable cachefiles module to minimize the risk of exploitation.
Avoid using the lookup one positive unlocked() function in the affected cachefiles look up object() function until the issue is resolved.Exploit
Fix
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu