Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26840

cachefiles: fix memory leak in cachefiles_add_cache()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was reported after unbinding /dev/cachefiles: ================================================================== unreferenced object 0xffff9b674176e3c0 (size 192): comm "cachefilesd2", pid 680, jiffies 4294881224 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc ea38a44b): [<ffffffff8eb8a1a5>] kmem_cache_alloc+0x2d5/0x370 [<ffffffff8e917f86>] prepare_creds+0x26/0x2e0 [<ffffffffc002eeef>] cachefiles_determine_cache_security+0x1f/0x120 [<ffffffffc00243ec>] cachefiles_add_cache+0x13c/0x3a0 [<ffffffffc0025216>] cachefiles_daemon_write+0x146/0x1c0 [<ffffffff8ebc4a3b>] vfs_write+0xcb/0x520 [<ffffffff8ebc5069>] ksys_write+0x69/0xf0 [<ffffffff8f6d4662>] do_syscall_64+0x72/0x140 [<ffffffff8f8000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0x76 ================================================================== Put the reference count of cache_cred in cachefiles_daemon_unbind() to fix the problem. And also put cache_cred in cachefiles_add_cache() error branch to avoid memory leaks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < cb5466783793e66272624cf71925ae1d1ba32083affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 037d5a949b0455540ef9aab34c10ddf54b65d285affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 43eccc5823732ba6daab2511ed32dfc545a666d8affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 94965be37add0983672e48ecb33cdbda92b62579affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 8b218e2f0a27a9f09428b1847b4580640b9d1e58affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 38e921616320d159336b0ffadb09e9fb4945c7c3affected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < 9cac69912052a4def571fedf1cb9bb4ec590e25aaffected
  • 9ae326a69004dea8af2dae4fde58de27db700a8d to < e21a2f17566cbd64926fb8f16323972f7a064444affected

Linux Linux

Default version status: affected

  • 2.6.30affected
  • 0 to < 2.6.30unaffected
  • 4.19.309 to ≤ 4.19.*unaffected
  • 5.4.271 to ≤ 5.4.*unaffected
  • 5.10.212 to ≤ 5.10.*unaffected
  • 5.15.151 to ≤ 5.15.*unaffected
  • 6.1.80 to ≤ 6.1.*unaffected
  • 6.6.19 to ≤ 6.6.*unaffected
  • 6.7.7 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References