CVE-2024-56749: dlm: fix dlm_recover_members refcount on error
In the Linux kernel, the following vulnerability has been resolved:
dlm: fix dlmrecovermembers refcount on error
If dlmrecovermembers() fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event because pingmembers() could run into an -EINTR if another recovery progress was triggered again.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56749?
CVE-2024-56749 has not been assigned a severity level yet, but vulnerabilities in the Linux kernel generally require prompt attention.
How do I fix CVE-2024-56749?
To fix CVE-2024-56749, upgrade the Linux kernel to versions 6.11.11 or later in the 6.11 series, or versions 6.12.2 or later in the 6.12 series.
Which versions of the Linux kernel are affected by CVE-2024-56749?
Versions of the Linux kernel between 6.10 and 6.11.11, and between 6.12 and 6.12.2 are affected by CVE-2024-56749.
What component of the Linux kernel is impacted by CVE-2024-56749?
CVE-2024-56749 impacts the Distributed Lock Manager (DLM) functionality within the Linux kernel.
Is there a public exploit for CVE-2024-56749?
As of now, there are no known public exploits for CVE-2024-56749.