CVE-2024-36947

qibfs: fix dentry leak

Medium · published May 30, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

qibfs: fix dentry leak

simple_recursive_removal() drops the pinning references to all positives

in subtree. For the cases when its argument has been kept alive by

the pinning alone that's exactly the right thing to do, but here

the argument comes from dcache lookup, that needs to be balanced by

explicit dput().

Fucked-up-by: Al Viro <[email protected]>

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Published
2024-05-30T15:35Z
EPSS history
Timeline
  • 30 MAY 15:35Z
    qibfs: fix dentry leak
    cvelistv5