CVE-2024-26972: ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path

Published May 1, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved: ubifs: ubifssymlink: Fix memleak of inode->ilink in error path For error handling path in ubifssymlink(), inode will be marked as bad first, then iput() is invoked. If inode->ilink is initialized by fscryptencryptsymlink() in encryption scenario, inode->ilink won't be freed by callchain ubifsfreeinode -> fscryptfreeinode in error handling path, because makebadinode() has changed 'inode->imode' as 'SIFREG'. Following kmemleak is easy to be reproduced by injecting error in ubifsjnlupdate() when doing symlink in encryption scenario: unreferenced object 0xffff888103da3d98 (size 8): comm "ln", pid 1692, jiffies 4294914701 (age 12.045s) backtrace: kmemdup+0x32/0x70 fscryptencryptsymlink+0xed/0x1c0 ubifssymlink+0x210/0x300 [ubifs] vfssymlink+0x216/0x360 dosymlinkat+0x11a/0x190 dosyscall64+0x3b/0xe0 There are two ways fixing it: 1. Remove makebadinode() in error handling path. We can do that because ubifsevictinode() will do same processes for good symlink inode and bad symlink inode, for inode->inlink checking is before isbadinode(). 2. Free inode->ilink before marking inode bad. Method 2 is picked, it has less influence, personally, I think.

Other sources

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

NVD

Affected Software

1 affected component
Linux Linux kernel

Event History

May 1, 2024
CVE Published
via MITRE·05:20 AM
Rejected
via MITRE·05:20 AM
Data Sourced
via NVD·06:15 AM
Description
Jun 8, 2024
Data Sourced
via Launchpad·01:11 AM
Description
Dec 19, 2024
Rejected
via MITRE·11:17 AM
Dec 21, 2024
Data Sourced
via Debian·06:37 AM
DescriptionAffected Software
May 6, 2025
Data Sourced
via Ubuntu·02:24 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-26972?

CVE-2024-26972 has been classified as a moderate severity vulnerability.

2

How do I fix CVE-2024-26972?

To fix CVE-2024-26972, ensure you update to the latest stable version of the Linux Kernel where the vulnerability has been addressed.

3

What versions of the Linux Kernel are affected by CVE-2024-26972?

CVE-2024-26972 affects certain versions of the Linux Kernel prior to the patch release that resolves this issue.

4

What type of vulnerability is CVE-2024-26972?

CVE-2024-26972 is a memory leak vulnerability in the ubifs filesystem during symlink creation.

5

Is CVE-2024-26972 actively exploited in the wild?

As of now, there is no indication that CVE-2024-26972 is actively exploited in the wild.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203