SECUFOCUSNOW
Home›CVE index›CVE-2024-41051
Review reviewHigh

CVE-2024-41051

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemand_object_worker to finish when dropping object When queuing ondemand_object_worker() to re-open the object, cachefiles_object is not pinned. The cachefiles_object may be freed when the pending read request is completed intentionally and the related erofs is umounted. If ondemand_object_worker() runs after the object is freed, it will incur use-after-free problem as shown below. process A processs B process C process D cachefiles_ondemand_send_req() // send a read req X // wait for its completion...

CVSS
7.8
EPSS
0.27%
19.5% percentile
CISA KEV
Not listed
Published
2024.07.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.27%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemand_object_worker to finish when dropping object When queuing ondemand_object_worker() to re-open the object, cachefiles_object is not pinned. The cachefiles_object may be freed when the pending read request is completed intentionally and the related erofs is umounted. If ondemand_object_worker() runs after the object is freed, it will incur use-after-free problem as shown below. process A processs B process C process D cachefiles_ondemand_send_req() // send a read req X // wait for its completion...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= f17443d52d805c9a7fab5e67a4e8b973626fe1cd < ec9289369259d982e735a71437e32e6b4035290c, >= f740fd943bb1fbf79b7eaba3c71eb7536f437f51 < d3179bae72b1b5e555ba839d6d9f40a350a4d78a, >= 0a7e54c1959c0feb2de23397ec09c7692364313e < b26525b2183632f16a3a4108fe6a4bfa8afac6ed, >= 0a7e54c1959c0feb2de23397ec09c7692364313e < 12e009d60852f7bce0afc373ca0b320f14150418, >= 6.1.95 < 6.1.100, >= 6.6.35 < 6.6.41, >= 6.8, >= 6.8 < 6.9.10, 6.10
Fixed versions
6.1.100, 6.6.41, 6.9.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416
CVE-2024-41051 — Linux Linux, linux kernel | SECUFOCUS NOW