CVE-2024-36947

2024-05-3016:15:17

Linux

web.nvd.nist.gov

linux kernel

qibfs

vulnerability

dropping pinning

dentry leak

AI Score

6.7

Confidence

Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

qibfs: fix dentry leak

simple_recursive_removal() drops the pinning references to all positives
in subtree. For the cases when its argument has been kept alive by
the pinning alone that’s exactly the right thing to do, but here
the argument comes from dcache lookup, that needs to be balanced by
explicit dput().

Fucked-up-by: Al Viro <[email protected]>

Affected configurations

Vulners

Node

linuxlinux_kernelRange5.13–5.15.159

linuxlinux_kernelRange5.16.0–6.1.91

linuxlinux_kernelRange6.2.0–6.6.31

linuxlinux_kernelRange6.7.0–6.8.10

linuxlinux_kernelRange6.9.0≥

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/hw/qib/qib_fs.c"
    ],
    "versions": [
      {
        "version": "e41d23781859",
        "lessThan": "24dd9b08df71",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e41d23781859",
        "lessThan": "bd8f78c71def",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e41d23781859",
        "lessThan": "db71ca93259d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e41d23781859",
        "lessThan": "02ee394a5d89",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e41d23781859",
        "lessThan": "aa23317d0268",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/infiniband/hw/qib/qib_fs.c"
    ],
    "versions": [
      {
        "version": "5.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.13",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.159",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.91",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.31",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]