Medium severity5.5NVD Advisory· Published Jan 12, 2024· Updated Jul 21, 2026
CVE-2024-0443
CVE-2024-0443
Description
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.2,<6.4
- cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*
- (no CPE)
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- access.redhat.com/errata/RHSA-2023:7077nvdThird Party Advisory
- access.redhat.com/security/cve/CVE-2024-0443nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- lore.kernel.org/linux-block/[email protected]/nvdMailing List
- access.redhat.com/errata/RHSA-2023:6583nvd
- access.redhat.com/errata/RHSA-2023:7370nvd
News mentions
0No linked articles in our index yet.