CVE-2024-40913

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of memory after it has been freed in the cachefiles module of the Linux kernel. This can cause a cache Use After Free (UAF) condition. The problem arises when an anonymous file descriptor is installed and then closed, potentially before the reference count of the cache is obtained. To resolve this, the cache reference count should be grabbed before installing the file descriptor. By kernel convention, the file descriptor is taken over by user land after installation, and the kernel should not call close on it after that. The fix involves calling fd install after everything is ready, specifically after copy to user succeeds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.