CVE-2024-56630: ocfs2: free inode when ocfs2_get_init_inode() fails
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: free inode when ocfs2getinitinode() fails
syzbot is reporting busy inodes after unmount, for commit 9c89fe0af826 ("ocfs2: Handle error from dquotinitialize()") forgot to call iput() when newinode() succeeded and dquotinitialize() failed.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56630?
CVE-2024-56630 has been classified with a medium severity level.
How do I fix CVE-2024-56630?
To fix CVE-2024-56630, users should update to the latest patched version of the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2024-56630?
CVE-2024-56630 affects specific commits in the Linux kernel prior to the vulnerability being patched.
What are the potential impacts of CVE-2024-56630?
The potential impacts of CVE-2024-56630 include the possibility of busy inodes after unmount, leading to filesystem inconsistencies.
What is the nature of the vulnerability in CVE-2024-56630?
CVE-2024-56630 relates to improper handling of inode management in the ocfs2 filesystem in the Linux kernel.