Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-36947
HistoryMay 30, 2024 - 12:00 a.m.

CVE-2024-36947

2024-05-3000:00:00
ubuntu.com
ubuntu.com
2
cve-2024-36947
linux kernel
qibfs
dentry leak
vulnerability
fix
simple recursive removal
dcache lookup
explicit dput
al viro
unix

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
qibfs: fix dentry leak
simple_recursive_removal() drops the pinning references to all positives
in subtree. For the cases when its argument has been kept alive by
the pinning alone that’s exactly the right thing to do, but here
the argument comes from dcache lookup, that needs to be balanced by
explicit dput().
Fucked-up-by: Al Viro <[email protected]>

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%