CVE-2022-48699

sched/debug: fix dentry leak in update_sched_domain_debugfs

published May 3, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

sched/debug: fix dentry leak in update_sched_domain_debugfs

Kuyo reports that the pattern of using debugfs_remove(debugfs_lookup())

leaks a dentry and with a hotplug stress test, the machine eventually

runs out of memory.

Fix this up by using the newly created debugfs_lookup_and_remove() call

instead which properly handles the dentry reference counting logic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Published
2024-05-03T15:11Z
EPSS history
Timeline
  • 03 MAY 15:11Z
    sched/debug: fix dentry leak in update_sched_domain_debugfs
    cvelistv5