CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
cachefiles: fix slab-use-after-free in cachefileswithdrawcookie()
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.101 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.42 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
Ensure fscache_withdraw_volume() is called before cachefiles_withdraw_objects() so that fscache_count_object() has executed before calling fscache_wait_for_objects().
cachefiles (FSCACHE cache withdrawal flow) call_order = fscache_withdraw_volume() before cachefiles_withdraw_objects() - Compensating control
After setting FSCACHE_CACHE_IS_WITHDRAWN, wait for all cookie lookups to complete first, and then wait for fscache_cache->object_count == 0 to ensure the cookie does not exit after the volume has been freed and trigger the slab-use-after-free in cachefiles_withdraw_cookie().
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41057?
CVE-2024-41057 is classified as a high severity vulnerability in the Linux kernel.
How do I fix CVE-2024-41057?
To fix CVE-2024-41057, upgrade your Linux kernel to one of the patched versions such as 6.1.101, 6.6.42, 6.9.11, or 6.10.
What systems are affected by CVE-2024-41057?
CVE-2024-41057 affects various versions of the Linux kernel, specifically versions from 5.17 up to 6.1.101, 6.2 up to 6.6.42, and 6.7 up to 6.9.11.
What is the nature of the vulnerability in CVE-2024-41057?
CVE-2024-41057 is a slab-use-after-free vulnerability found in the cachefiles_withdraw_cookie() function within the Linux kernel.
Is there any workaround for CVE-2024-41057?
There is no official workaround for CVE-2024-41057; the recommended action is to apply the security update.