CVE-2024-35882: SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
Jan Schunk reports that his small NFS servers suffer from memory exhaustion after just a few days. A bisect shows that commit e18e157bb5c8 ("SUNRPC: Send RPC message on TCP with a single socksendmsg() call") is the first bad commit.
That commit assumed that socksendmsg() releases all the pages in the underlying biovec array, but the reality is that it doesn't. svcxprtrelease() releases the rqst's response pages, but the record marker page fragment isn't one of those, so it is never released.
This is a narrow fix that can be applied to stable kernels. A more extensive fix is in the works.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35882?
CVE-2024-35882 has been classified as a medium severity vulnerability due to the potential for memory exhaustion.
How do I fix CVE-2024-35882?
To fix CVE-2024-35882, you should update to the patched Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What type of systems are affected by CVE-2024-35882?
CVE-2024-35882 affects small NFS servers running specific versions of the Linux kernel that utilize RPC-over-TCP.
Is CVE-2024-35882 a remote vulnerability?
CVE-2024-35882 is not classified as a remote vulnerability, but it can lead to server-side memory leaks under certain conditions.
Who reported the CVE-2024-35882 vulnerability?
The vulnerability CVE-2024-35882 was reported by Jan Schunk, who observed memory exhaustion on his small NFS servers.