In the Linux kernel, the following vulnerability has been resolved:
fs/mount_setattr: always cleanup mount_kattr
Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We returned early if path lookup failed thereby risking to leak an additional reference we took when building mount_kattr when an idmapped mount was requested.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dtb-amd | Aug 9, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub