CVE-2024-53175

Summary

CVE-2024-53175 is a recently identified vulnerability affecting the Linux kernel. This issue lies in the ipc (Inter-Process Communication) subsystem, specifically in the function "create_ipc_ns." Upon failure of percpu memory allocation during the creation of this namespace, the associated ipc and mq sysctls (sysctl is a method to configure various kernel parameters) are not properly released. Consequently, a memory leak occurs. The leaked memory can lead to unintended system behavior or potential exploitation. The provided stack trace indicates an unreferenced object of size 512 bytes belonging to the "shmem_2nstest" process, which further underscores the significance of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.