CVE-2024-41001

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a potential audit memory leak in the io uring/sqpoll component of the Linux kernel. This can happen if the command type triggers an audit call on the prep side or if the thread hasn't done any operations before this that triggered an audit call inside ->issue(), where audit uring entry() and audit uring exit() are located. The memory leak is related to connect handling and can be identified by kmemleak complaints about unreferenced objects. A workaround is to issue a blanket NOP operation before the SQPOLL does anything.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.