CVE - CVE-2024-41075

CVE-ID
CVE-2024-41075	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: add consistency check for copen/cread This prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks are listed below: * Generic, copen can only complete open requests, and cread can only complete read requests. * For copen, ondemand_id must not be 0, because this indicates that the request has not been read by the daemon. * For cread, the object corresponding to fd and req should be the same.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/36d845ccd7bf527110a65fe953886a176c209539 URL:https://git.kernel.org/stable/c/36d845ccd7bf527110a65fe953886a176c209539 MISC:https://git.kernel.org/stable/c/3b744884c0431b5a62c92900e64bfd0ed61e8e2a URL:https://git.kernel.org/stable/c/3b744884c0431b5a62c92900e64bfd0ed61e8e2a MISC:https://git.kernel.org/stable/c/8aaa6c5dd2940ab934d6cd296175f43dbb32b34a URL:https://git.kernel.org/stable/c/8aaa6c5dd2940ab934d6cd296175f43dbb32b34a MISC:https://git.kernel.org/stable/c/a26dc49df37e996876f50a0210039b2d211fdd6f URL:https://git.kernel.org/stable/c/a26dc49df37e996876f50a0210039b2d211fdd6f
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)