CVE-2024-47733

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc3

Description A vulnerability in the Linux kernel has been identified where the netfs module fails to properly delete its subtree when it exits, leading to a warning about removing a non-empty directory. This issue arises from the use of remove proc entry() instead of remove proc subtree() in the netfs exit() function. The problem occurs when the netfs init() or fscache proc init() functions create a dentry under 'fs/netfs', but the netfs exit() function only deletes the proc entry of 'fs/netfs' without deleting its subtree.

Recommendations To resolve this issue, use remove proc subtree() instead of remove proc entry() in the netfs exit() function for Linux kernel versions prior to 6.11.0-rc3.