CVE-2024-0443

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the blkgs destruction path in block/blk-cgroup.c, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup rstat flush() is only called at css release work fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with local access to cause system instability, such as an out of memory error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.