DEBIAN-CVE-2024-47733
- Source
- https://security-tracker.debian.org/tracker/CVE-2024-47733
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-47733.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-47733
- Upstream
- Published
- 2024-10-21T13:15:03Z
- Modified
- 2025-09-19T06:15:50Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfsinit() or fscacheprocinit(), we create dentry under 'fs/netfs', but in netfsexit(), we only delete the proc entry of 'fs/netfs' without deleting its subtree. This triggers the following WARNING: ================================================================== removeprocentry: removing non-empty directory 'fs/netfs', leaking at least 'requests' WARNING: CPU: 4 PID: 566 at fs/proc/generic.c:717 removeprocentry+0x160/0x1c0 Modules linked in: netfs(-) CPU: 4 UID: 0 PID: 566 Comm: rmmod Not tainted 6.11.0-rc3 #860 RIP: 0010:removeprocentry+0x160/0x1c0 Call Trace: <TASK> netfsexit+0x12/0x620 [netfs] _dosysdeletemodule.isra.0+0x14c/0x2e0 dosyscall64+0x4b/0x110 entrySYSCALL64afterhwframe+0x76/0x7e ================================================================== Therefore use removeprocsubtree() instead of removeproc_entry() to fix the above problem.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source