PT-2024-35624 · Linux+5 · Linux Kernel+5
Published
2024-11-18
·
Updated
2026-05-26
·
CVE-2024-53178
CVSS v2.0
5.5
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a memory leak in the Linux kernel's SMB functionality. Specifically, when the
open cached dir() function races with the tcon reconnection, it can lead to a memory leak. The reconnection process invokes invalidate all cached dirs(), which removes all cfids from the cfids->entries list but doesn't drop a ref if has lease isn't true. This results in the currently-being-constructed cfid not being on the list but still having a refcount of 2, causing a leak if returned from open cached dir(). The fix involves setting cfid->has lease when the ref is actually taken, ensuring the cfid is not used by other threads until it has a valid time. This addresses kmemleaks and BUG splats when unmounting the SMB filesystem.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu