CVE-2024-50119: cifs: fix warning when destroy 'cifs_io_request_pool'
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix warning when destroy 'cifsiorequestpool'
There's a issue as follows: WARNING: CPU: 1 PID: 27826 at mm/slub.c:4698 freelargekmalloc+0xac/0xe0 RIP: 0010:freelargekmalloc+0xac/0xe0 Call Trace: <TASK> ? warn+0xea/0x330 mempooldestroy+0x13f/0x1d0 initcifs+0xa50/0xff0 [cifs] dooneinitcall+0xdc/0x550 doinitmodule+0x22d/0x6b0 loadmodule+0x4e96/0x5ff0 initmodulefromfile+0xcd/0x130 idempotentinitmodule+0x330/0x620 x64sysfinitmodule+0xb3/0x110 dosyscall64+0xc1/0x1d0 entrySYSCALL64afterhwframe+0x77/0x7f
Obviously, 'cifsiorequestpool' is not created by mempoolcreate(). So just use mempoolexit() to revert 'cifsiorequestpool'.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50119?
The vulnerability CVE-2024-50119 is classified as a low-severity issue.
How do I fix CVE-2024-50119?
To resolve CVE-2024-50119, update your Linux kernel to versions 6.12 or higher.
Which Linux kernel versions are affected by CVE-2024-50119?
CVE-2024-50119 affects Linux kernel versions from 6.10 to 6.11.6 and 6.12-rc1 to 6.12-rc4.
What type of issue does CVE-2024-50119 address?
CVE-2024-50119 addresses a warning generated in the Linux kernel during the destruction of 'cifs_io_request_pool'.
Is CVE-2024-50119 exploitable?
CVE-2024-50119 is not known to be exploitable as it primarily involves a warning and does not indicate a security breach.