PT-2024-36891 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-11-29
·
Updated
2026-05-26
·
CVE-2024-56584
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A vulnerability in the Linux kernel has been resolved, related to the io uring/tctx component. The issue arises when the xa store() function fails to allocate memory, causing the
->head to be non-NULL even though no entries exist in the xarray. This triggers a WARN ON ONCE() sanity check in the io uring free() function. The vulnerability was identified by syzbot, which injected memory allocation failures to test the kernel's behavior.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider implementing a custom sanity check to iterate entries in the xarray and warn if any are found, similar to the workaround implemented in the resolved version.
Exploit
Fix
DoS
Resource Exhaustion
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu