CVE-2024-14027: xattr: switch to CLASS(fd)
In the Linux kernel, the following vulnerability has been resolved:
fs/xattr: missing fdput() in fremovexattr error path
In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpyfromuser() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 ("xattr: switch to CLASS(fd)").
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate by reducing exposure of unprivileged local users to multi-threaded workloads that can trigger the Linux kernel fremovexattr() syscall vulnerability until the missing fdput() error-path issue is patched.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-14027?
CVE-2024-14027 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-14027?
To fix CVE-2024-14027, you should update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What is the impact of CVE-2024-14027?
CVE-2024-14027 can lead to resource leaks in the system, potentially causing instability or performance issues.
Which versions of the Linux kernel are affected by CVE-2024-14027?
CVE-2024-14027 affects specific versions of the Linux kernel prior to applying the patch; always consult the latest release notes for detailed information.
Is CVE-2024-14027 exploit-related?
Currently, there are no known exploits in the wild for CVE-2024-14027, but it is still recommended to apply the necessary updates.