CVE-2024-0443

Summary

CVE-2024-0443 is a memory leakage vulnerability affecting the Linux kernel's cgroup destruction path in block/blk-cgroup.c. The issue arises due to a circular dependency between blkcg and some blkgs, resulting in a failure to free these components after they go offline. When a cgroup is being destroyed, the function cgroup_rstat_flush() is only called when the blkcg reference count reaches zero. This delay in memory release can potentially lead to system instability, such as an out-of-memory error, providing a local attacker with an opportunity to cause disruptions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.