PT-2024-6712 · Linux+8 · Linux Kernel+8

Published

2024-04-15

·

Updated

2026-05-26

·

CVE-2024-41001

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a potential audit memory leak in the io uring/sqpoll component of the Linux kernel. This can happen if the command type triggers an audit call on the prep side or if the thread hasn't done any operations before this that triggered an audit call inside ->issue(), where audit uring entry() and audit uring exit() are located. The memory leak is related to connect handling and can be identified by kmemleak complaints about unreferenced objects. A workaround is to issue a blanket NOP operation before the SQPOLL does anything.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-11524
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-47928
BDU:2024-07925
CVE-2024-41001
DLA-4008-1
DSA-5731-1
INFSA-2024_9315
OESA-2025-1097
RHSA-2024:9315
RHSA-2024_9315
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu