CVE-2024-41001: io_uring/sqpoll: work around a potential audit memory leak
In the Linux kernel, the following vulnerability has been resolved:
iouring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleakalloc+0x30/0x38 [<000000009c30bb45>] kmalloctrace+0x228/0x358 [<000000009da9d39f>] auditsockaddr+0xd0/0x138 [<0000000089a93e34>] moveaddrtokernel+0x1a0/0x1f8 [<000000000b4e80e6>] ioconnectprep+0x1ec/0x2d4 [<00000000abfbcd99>] iosubmitsqes+0x588/0x1e48 [<00000000e7c25e07>] iosqthread+0x8a4/0x10e4 [<00000000d999b491>] retfromfork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audituringentry() and audituringexit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41001?
The CVE-2024-41001 vulnerability in the Linux kernel has been classified as a low severity issue.
How do I fix CVE-2024-41001?
To mitigate CVE-2024-41001, update your kernel to version 6.1.96, 6.6.36, 6.9.7, or 6.10 or the respective patched versions in Debian.
What systems are affected by CVE-2024-41001?
CVE-2024-41001 affects multiple versions of the Linux kernel including versions prior to 6.1.96, between 6.2 and 6.6.36, and 6.7 to 6.9.7.
Does CVE-2024-41001 allow for remote exploitation?
CVE-2024-41001 does not facilitate remote code execution but may lead to a potential audit memory leak.
Can CVE-2024-41001 impact system stability?
While CVE-2024-41001 poses a low severity level, it could potentially impact memory management and system stability if not patched.