CVE-2024-41074

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43

Description The issue arises when the copen function is maliciously called in user mode, potentially deleting a request corresponding to a random id before it has been read. If the object is set to reopen, the open request will be done with the still reopen state, causing the request to be skipped in the select req function. As a result, the read request is never completed and blocks other processes. This can occur when the ondemand id is less than 0.

Recommendations To resolve the issue, update to Linux kernel version 6.6.43 or later. As a temporary workaround, consider disabling the copen function until a patch is available. Restrict access to the cachefiles module to minimize the risk of exploitation. Avoid using the ondemand id parameter in the affected kernel functions until the issue is resolved.