Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41075
HistoryJul 29, 2024 - 2:57 p.m.

CVE-2024-41075 cachefiles: add consistency check for copen/cread

2024-07-2914:57:34
Linux
github.com
2
linux kernel
cve-2024-41075
cachefiles
consistency check
open requests
read requests

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

cachefiles: add consistency check for copen/cread

This prevents malicious processes from completing random copen/cread
requests and crashing the system. Added checks are listed below:

  • Generic, copen can only complete open requests, and cread can only
    complete read requests.
  • For copen, ondemand_id must not be 0, because this indicates that the
    request has not been read by the daemon.
  • For cread, the object corresponding to fd and req should be the same.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial