CVE-2024-53215

Summary

CVE-2024-53215 is a vulnerability affecting the Linux kernel's RPC (Remote Procedure Call) subsystem. The issue arises when the registered rdma (Remote Direct Memory Access) transport and backchannel transport modules are not properly unregistered, leading to the destruction of percpu counters not being completed. This can result in memory leakage if CONFIG_HOTPLUG_CPU is not enabled. However, if this configuration is enabled, residual nodes may remain in the 'percpu_counters' list, potentially causing a kernel panic when the module is removed. To mitigate this issue, the percpu counters must be destroyed when register_sysctl() returns NULL.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.