CVE-2024-41075

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-41075
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41075.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41075
Downstream
Related
Published
2024-07-29T15:15:15Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

cachefiles: add consistency check for copen/cread

This prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks are listed below:

  • Generic, copen can only complete open requests, and cread can only complete read requests.
  • For copen, ondemand_id must not be 0, because this indicates that the request has not been read by the daemon.
  • For cread, the object corresponding to fd and req should be the same.
References

Affected packages