CVE-2024-26764

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to errors in resource management within the fs/aio component of the Linux kernel. Specifically, when kiocb set cancel fn() is called for I/O submitted via io uring, a kernel warning appears. The warning is due to the call trace involving kiocb set cancel fn(), ffs epfile read iter(), io read(), io issue sqe(), io submit sqes(), and other system calls. This issue can potentially allow an attacker to cause a denial of service. The fix involves setting the IOCB AIO RW flag for read and write I/O submitted by libaio.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.