CVE-2024-41075: cachefiles: add consistency check for copen/cread
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add consistency check for copen/cread
This prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks are listed below:
Generic, copen can only complete open requests, and cread can only complete read requests. For copen, ondemandid must not be 0, because this indicates that the request has not been read by the daemon. For cread, the object corresponding to fd and req should be the same.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41075?
CVE-2024-41075 is classified as a high severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-41075?
To fix CVE-2024-41075, update your Linux kernel to version 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which versions of the Linux kernel are affected by CVE-2024-41075?
CVE-2024-41075 affects Linux kernel versions up to and including 5.10.226-1.
What systems are vulnerable to CVE-2024-41075?
Debian-based systems running the specified affected versions of the Linux kernel are vulnerable to CVE-2024-41075.
What does CVE-2024-41075 exploit in the Linux kernel?
CVE-2024-41075 exploits the cachefiles feature to allow malicious processes to crash the system through random copen/cread requests.