CVE-2024-47733: netfs: Delete subtree of 'fs/netfs' when netfs module exits
In the Linux kernel, the following vulnerability has been resolved:
netfs: Delete subtree of 'fs/netfs' when netfs module exits
In netfsinit() or fscacheprocinit(), we create dentry under 'fs/netfs', but in netfsexit(), we only delete the proc entry of 'fs/netfs' without deleting its subtree. This triggers the following WARNING:
================================================================== removeprocentry: removing non-empty directory 'fs/netfs', leaking at least 'requests' WARNING: CPU: 4 PID: 566 at fs/proc/generic.c:717 removeprocentry+0x160/0x1c0 Modules linked in: netfs(-) CPU: 4 UID: 0 PID: 566 Comm: rmmod Not tainted 6.11.0-rc3 #860 RIP: 0010:removeprocentry+0x160/0x1c0 Call Trace: <TASK> netfsexit+0x12/0x620 [netfs] dosysdeletemodule.isra.0+0x14c/0x2e0 dosyscall64+0x4b/0x110 entrySYSCALL64afterhwframe+0x76/0x7e ==================================================================
Therefore use removeprocsubtree() instead of removeprocentry() to fix the above problem.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.11.2-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In netfs_exit(), replace remove_proc_entry() with remove_proc_subtree() to delete the entire 'fs/netfs' proc subtree when the netfs module exits.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47733?
CVE-2024-47733 has a moderate severity rating due to potential stability issues in the Linux kernel.
How do I fix CVE-2024-47733?
To fix CVE-2024-47733, update the Linux kernel to version 6.10.13 or higher or to version 6.11.2 or higher.
Which versions of the Linux kernel are affected by CVE-2024-47733?
CVE-2024-47733 affects Linux kernel versions from 6.8 to 6.10.13 and from 6.11 to 6.11.2.
What components are involved in CVE-2024-47733?
CVE-2024-47733 is related to the netfs subsystem of the Linux kernel.
Is CVE-2024-47733 being actively exploited?
There is currently no evidence to suggest that CVE-2024-47733 is being actively exploited in the wild.