CVE-2024-47733: netfs: Delete subtree of 'fs/netfs' when netfs module exits
In the Linux kernel, the following vulnerability has been resolved:
netfs: Delete subtree of 'fs/netfs' when netfs module exits
In netfsinit() or fscacheprocinit(), we create dentry under 'fs/netfs', but in netfsexit(), we only delete the proc entry of 'fs/netfs' without deleting its subtree. This triggers the following WARNING:
================================================================== removeprocentry: removing non-empty directory 'fs/netfs', leaking at least 'requests' WARNING: CPU: 4 PID: 566 at fs/proc/generic.c:717 removeprocentry+0x160/0x1c0 Modules linked in: netfs(-) CPU: 4 UID: 0 PID: 566 Comm: rmmod Not tainted 6.11.0-rc3 #860 RIP: 0010:removeprocentry+0x160/0x1c0 Call Trace: <TASK> netfsexit+0x12/0x620 [netfs] dosysdeletemodule.isra.0+0x14c/0x2e0 dosyscall64+0x4b/0x110 entrySYSCALL64afterhwframe+0x76/0x7e ==================================================================
Therefore use removeprocsubtree() instead of removeprocentry() to fix the above problem.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47733?
CVE-2024-47733 has a moderate severity rating due to potential stability issues in the Linux kernel.
How do I fix CVE-2024-47733?
To fix CVE-2024-47733, update the Linux kernel to version 6.10.13 or higher or to version 6.11.2 or higher.
Which versions of the Linux kernel are affected by CVE-2024-47733?
CVE-2024-47733 affects Linux kernel versions from 6.8 to 6.10.13 and from 6.11 to 6.11.2.
What components are involved in CVE-2024-47733?
CVE-2024-47733 is related to the netfs subsystem of the Linux kernel.
Is CVE-2024-47733 being actively exploited?
There is currently no evidence to suggest that CVE-2024-47733 is being actively exploited in the wild.