PT-2026-24078 · Linux · Linux Kernel

Published 2024-01-01 · Updated 2026-03-16 · CVE-2024-14027

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s

fremovexattr()

syscall within the fs/xattr component. Specifically, the function calls

fdget()

to obtain a file reference but fails to release it using

fdput()

when

strncpy from user()

encounters an error while processing the name argument. This results in a permanent leak of a file reference for each call, potentially leading to kernel memory exhaustion in multi-threaded processes. An unprivileged local user can trigger this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-14027

Affected Products

Linux Kernel

References · 11

• https://security-tracker.debian.org/tracker/CVE-2024-14027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-14027 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-14027 · Vendor Advisory
• https://git.kernel.org/stable/c/d151b94967c8247005435b63fc60f8f4baa320da · Note
• https://twitter.com/lcfr_eth/status/2032541122086474117 · Twitter Post
• https://git.kernel.org/stable/c/a71874379ec8c6e788a61d71b3ad014a8d9a5c08 · Note
• https://t.me/CVEtracker/46914 · Telegram Post
• https://t.me/msrcreports/3345 · Telegram Post
• https://twitter.com/CVEnew/status/2031122526038859911 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2031108004444074081 · Twitter Post
• https://twitter.com/vuln_tracker/status/2033439557522428373 · Twitter Post