CVE-2024-50165: bpf: Preserve param->string when parsing mount options
In the Linux kernel, the following vulnerability has been resolved:
bpf: Preserve param->string when parsing mount options
In bpfparseparam(), keep the value of param->string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param->string will be leaked as shown below:
unreferenced object 0xffff888118c46d20 (size 8): comm "newname", pid 12109, jiffies 4295580214 hex dump (first 8 bytes): 61 6e 79 00 38 c9 5c 7e any.8.\~ backtrace (crc e1b7f876): [<00000000c6848ac7>] kmemleakalloc+0x4b/0x80 [<00000000de9f7d00>] kmallocnodetrackcallernoprof+0x36e/0x4a0 [<000000003e29b886>] memdupuser+0x32/0xa0 [<0000000007248326>] strndupuser+0x46/0x60 [<0000000035b3dd29>] x64sysfsconfig+0x368/0x3d0 [<0000000018657927>] x64syscall+0xff/0x9f0 [<00000000c0cabc95>] dosyscall64+0x3b/0xc0 [<000000002f331597>] entrySYSCALL64afterhwframe+0x4b/0x53
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50165?
CVE-2024-50165 has a moderate severity level due to a memory leak in the Linux kernel.
How do I fix CVE-2024-50165?
To fix CVE-2024-50165, update your Linux kernel to version 6.11.6 or later.
What software versions are affected by CVE-2024-50165?
CVE-2024-50165 affects Linux kernel versions prior to 6.11.6 and specific release candidates of 6.12.
Is CVE-2024-50165 exploitable?
CVE-2024-50165 is a memory leak vulnerability, generally low in exploitability, primarily impacting system performance and resources.
What components of the Linux kernel are impacted by CVE-2024-50165?
CVE-2024-50165 impacts the bpf_parse_param() function in the Linux kernel.