CVE-2024-53178

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel's SMB functionality. Specifically, when the open cached dir() function races with the tcon reconnection, it can lead to a memory leak. The reconnection process invokes invalidate all cached dirs(), which removes all cfids from the cfids->entries list but doesn't drop a ref if has lease isn't true. This results in the currently-being-constructed cfid not being on the list but still having a refcount of 2, causing a leak if returned from open cached dir(). The fix involves setting cfid->has lease when the ref is actually taken, ensuring the cfid is not used by other threads until it has a valid time. This addresses kmemleaks and BUG splats when unmounting the SMB filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.