CVE-2024-56755

Summary

CVE-2024-56755: A vulnerability was discovered in the Linux kernel's netfs/fscache, where a missing memory barrier in the fscache_create_volume function could result in an indefinite wait for a process. This issue occurs when two processes, cookie1 and cookie2, attempt to create a volume with the same name, and cookie1 enters the "-no-wait" process before cookie2. Consequently, cookie2 may remain in the "wait" process indefinitely. The issue was caused by a missing memory barrier between a bit-clearing operation and a wake-up operation. This vulnerability has been resolved by adding barriers in the commit 3288666c7256, but the change was not applied to fscache_create_volume().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.