Linux Kernel xattr memory allocation

Summaryinfo

A vulnerability labeled as critical has been found in Linux Kernel. This impacts an unknown function of the component xattr. The manipulation results in memory allocation. This vulnerability is reported as CVE-2024-14027. The attack requires a local approach. No exploit exists. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as critical, was found in Linux Kernel (the affected version unknown). Affected is an unknown part of the component xattr. The manipulation with an unknown input leads to a memory allocation vulnerability. CWE is classifying the issue as CWE-789. The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. This is going to have an impact on availability. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 ("xattr: switch to CLASS(fd)").

The advisory is available at git.kernel.org. This vulnerability is traded as CVE-2024-14027 since 03/09/2026. The exploitability is told to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available.

Applying the patch a71874379ec8c6e788a61d71b3ad014a8d9a5c08 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-55470). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion