In the Linux kernel, the following vulnerability has been resolved:
fs/mount_setattr: always cleanup mount_kattr
Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any references we took when we built it. We returned early if path lookup failed thereby risking to leak an additional reference we took when building mount_kattr when an idmapped mount was requested.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub