CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns
In the Linux kernel, the following vulnerability has been resolved:
ipc: fix memleak if msginitns failed in createipcns
Percpu memory allocation may failed during createipcns however this fail is not handled properly since ipc sysctls and mq sysctls is not released properly. Fix this by release these two resource when failure.
Here is the kmemleak stack when percpu failed:
unreferenced object 0xffff88819de2a600 (size 512): comm "shmem2nstest", pid 120711, jiffies 4300542254 hex dump (first 32 bytes): 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff .........H..... 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V..... backtrace (crc be7cba35): [<ffffffff81b43f83>] kmallocnodetrackcallernoprof+0x333/0x420 [<ffffffff81a52e56>] kmemdupnoprof+0x26/0x50 [<ffffffff821b2f37>] setupmqsysctls+0x57/0x1d0 [<ffffffff821b29cc>] copyipcs+0x29c/0x3b0 [<ffffffff815d6a10>] createnewnamespaces+0x1d0/0x920 [<ffffffff815d7449>] copynamespaces+0x2e9/0x3e0 [<ffffffff815458f3>] copyprocess+0x29f3/0x7ff0 [<ffffffff8154b080>] kernelclone+0xc0/0x650 [<ffffffff8154b6b1>] dosysclone+0xa1/0xe0 [<ffffffff843df8ff>] dosyscall64+0xbf/0x1c0 [<ffffffff846000b0>] entrySYSCALL64afterhwframe+0x4b/0x53
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53175?
CVE-2024-53175 is classified with a moderate severity due to potential memory leaks that could affect system performance.
How do I fix CVE-2024-53175?
To fix CVE-2024-53175, update the Linux kernel to a version that includes the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-53175?
CVE-2024-53175 affects Linux kernel versions between 6.1 and 6.12, excluding specific patched versions.
What does CVE-2024-53175 impact in the Linux kernel?
CVE-2024-53175 impacts IPC (Inter-Process Communication) functionality by potentially causing memory leaks.
Is there any exploit available for CVE-2024-53175?
At present, there has been no public disclosure of known exploits for CVE-2024-53175.