CVE-2024-47660

Summary

CVE-2024-47660 is a vulnerability affecting the Linux kernel's fsnotify subsystem. In setups where directories have a large number of dentries, the function __fsnotify_update_child_dentry_flags() can take a significant amount of time, leading to contention on the inode lock. This issue causes softlockups due to races between __fsnotify_update_child_dentry_flags() calls from fsnotify_recalc_mask() and __fsnotify_parent() happening on children. The vulnerability is resolved by setting PARENT_WATCHED flags only when a parent starts watching children and clearing false positive PARENT_WATCHED flags lazily in __fsnotify_parent() for each accessed child.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.