PT-2024-7326 · Linux+5 · Linux Kernel+5
Bart Van Assche
·
Published
2024-02-21
·
Updated
2025-03-28
·
CVE-2024-26764
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to errors in resource management within the fs/aio component of the Linux kernel. Specifically, when
kiocb set cancel fn() is called for I/O submitted via io uring, a kernel warning appears. The warning is due to the call trace involving kiocb set cancel fn(), ffs epfile read iter(), io read(), io issue sqe(), io submit sqes(), and other system calls. This issue can potentially allow an attacker to cause a denial of service. The fix involves setting the IOCB AIO RW flag for read and write I/O submitted by libaio.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu