Memory Reference Count Leak in Linux Kernel's ext4 Package
Summary
DEBIAN-CVE-2024-39276: In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Syzbot reports a warning as follows: =========================================... Affects linux versions < 5.10.221-1. Fixed in 5.10.221-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. The ext4 package is a widely used file system in Linux, known for its robustness and performance. However, it is susceptible to vulnerabilities that can lead to system instability and data loss, such as the memory reference count leak identified in this report.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ext4 file system related to a memory reference count leak. This issue arises in the function ext4_xattr_block_cache_find(), where if the ext4_sb_bread() function returns -ENOMEM, the reference count of the cache entry (ce's e_refcnt) is not decremented. This oversight can lead to a warning during the destruction of the memory cache, potentially causing system crashes or data corruption due to improper memory management.
How To Fix
Minimum fixed version
5.10.221-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can monitor the memory usage and avoid operations that may trigger the ext4_xattr_block_cache_find() function until the system is updated. However, the best course of action is to apply the patch as soon as possible.
Conclusion
The memory reference count leak in the Linux kernel's ext4 package poses a significant risk to system stability and data integrity. Users are strongly advised to update their systems to the patched versions to mitigate this vulnerability. Utilizing tools like Vulert can help in monitoring and managing open-source vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory reference count leak in the ext4 file system of the Linux kernel, which can lead to system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading a manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
If exploited, this vulnerability can lead to system crashes, data corruption, and overall instability of the operating system.
Yes, updating to the patched versions (5.10.221-1 for Debian 11, 6.1.94-1 for Debian 12, and 6.9.7-1 for Debian 13 and 14) will resolve the vulnerability.
Yes, you can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
