CVE-2024-53174

Summary

CVE-2024-53174 is a Linux kernel vulnerability affecting the SUNRPC subsystem. The issue lies in the `c_show` function, which was called with RCU protection. However, this protection only prevented `cp` from being freed, allowing its reference count to drop to zero. This results in a refcount use-after-free warning and potential security vulnerability. To mitigate this issue, use `cache_get_rcu` instead of `cache_get` to ensure that `cp` remains active. The vulnerability was identified during the usage of the 'cat' command and could lead to a refcount error, as indicated in the system logs.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.