CVE detail
CVE-2024-0443
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://lore.kernel.org/linux-block/[email protected]/lore.kernel.org
No excerpt available.
Vendor Advisorylore.kernel.orgJan 12, 2024, 12:15 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2257968bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJan 12, 2024, 12:15 AM - https://access.redhat.com/security/cve/CVE-2024-0443access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJan 12, 2024, 12:15 AM - https://access.redhat.com/errata/RHSA-2023:7370access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJan 12, 2024, 12:15 AM - https://access.redhat.com/errata/RHSA-2023:7077access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJan 12, 2024, 12:15 AM - https://access.redhat.com/errata/RHSA-2023:6583access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJan 12, 2024, 12:15 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-4569CVSS 5.5 · Medium
A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of…
- CVE-2023-52160CVSS 6.5 · Medium
The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS…
- CVE-2024-1151CVSS 5.5 · Medium
A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block.…
- CVE-2024-0607CVSS 6.6 · Medium
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst`…
- CVE-2021-3600CVSS 7.8 · High
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local a…
- CVE-2023-6546CVSS 7.0 · High
A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor…